Everything posted by volcs0
-
Help with backup strategy (on prem)
I have 3-2-1 backups of my very-most-important stuff - family photos, videos, etc. I have multiple off-site redundant backups of these precious items. I would like to also have a backup of my music, TV, and. movies. Yes, I know that many don't back up their media, preferring to rely on *arr software for reconstituting a crash. But my stomach is not that strong. I've spent 20 years curating and giving lots of love to these collections. I have enough external hard drive space to back most of it up right now (~25Tb). What is the best way to do this - and to sustain it going forward? These are the two options I can think of: 1. Back up to the external hard drives via USB to my unRAID. 2. I have a spare MacMini that I could set up as an end point for a continuously running backup on the home network. I'm not sure the best way to do this - maybe have the drives mounted as network shares via SMB and have backup software running that does daily incremental backups. 3. I don't want to set up a completely separate unRAID server for mirroring, as others have suggested - mainly because I think it is overkill and I don't see the point in the expense of the parity and cache drives. 4. I don't want to use cloud backup - it would take months to seed the first one. And it would be too expensive. Ideally, once a drive is filled, I could take it offsite (e.g., to my office) and leave it there. Other thoughts? I'll sleep much better once this is done. Thanks for the advice.
-
NGINX reverse proxy / duckdns validation - what am I doing wrong?
I had to switch from http validation to duckdns validation because my ISP won't allow forwarding port 80. I set up mydomain.duckdns.org. My config screen for Swag is attached. I set up a few proxy-conf files - for calibre-web, plex, and emby. An example is attached (for calibre-web). This does not work. I tried https://calibre.mydomain.duckdns.org and it hangs and times out. I see that port 443 is forwarding. Nothing updates in the Swag log when I try to connect, if that's helpful. I feel like I'm missing something obvious, but I don't see it. I've tried to add other server_name variables to the calibre-web.subdomain.conf file - like www.calibre.* and calibre.mydomain.* etc. but this doesn't help. Any advice is appreciated - I've been at it all afternoon. Thanks.
-
[Support] Linuxserver.io - SWAG - Secure Web Application Gateway (Nginx/PHP/Certbot/Fail2ban)
Edit: I realized that I cannot do this without forwarding port 80. Since I cannot do that, I changed to trying duckdns validation. While I now see that port 443 is open, I am still not able to get my reverse proxy running. I've asked about this in a new thread here: -------- This is a bit of complex question. I'm unable to forward in requests, and I think it has to do with the way that Comcast/Xfinity's modem/router works/doesn't work. I'm using default settings for the docker for port 80 (8080-->80) and 443. I have port 443 forwarded to my unRAID box. I do not have port 80 forwarded. Do I need to? I'm getting this error: Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems: Domain: XXXXX.duckdns.org Type: connection Detail: Fetching http://XXXXXX.duckdns.org/.well-known/acme-challenge/0JQsgWcr6OCovXfDLxU8F4m3U3t_jHOqawZJ1DyVI: Timeout during connect (likely firewall problem) Hint: The Certificate Authority failed to download the challenge files from the temporary standalone webserver started by Certbot on port 80. Ensure that the listed domains point to this machine and that it can accept inbound connections from the internet. Do I need to set up port 80 to forward to port 8080 on my unRAID? If so, I think I'm out of luck, as XFinity's XFi gateway does not allow you to map one port to another. Any advice on how to mitigate these errors is appreciated. Thanks.
-
[Support] binhex - SABnzbdVPN
Perfect - as you indicated, I removed the VPN_OUTPUT_PORTS, and everything still works. Thank you very much for the help.
-
[Support] binhex - SABnzbdVPN
I'll look at the FAQ, since I clearly am missing the mark here. I had it all working with Radarr and Sonarr not using the VPN provided by sabnabdvpn. I just wanted to add a little more security, so I messed with it to have them leverage the VPN. But then I couldn't get the Radarr and Sonarr interfaces up until I added those VPN in and out ports. But I will try to read and learn more about this. Thank you for your patience.
-
[Support] binhex - SABnzbdVPN
Yes, I ran it from within the sabnzbdvpn console. I'm running several other containers through this one as well (Radarr, Sonarr, Firefox), so I just wanted to make sure that the connection was secure as possible. I had to enter those ports (e.g., 7878, 8989) in the VPN input ports and VPN output ports to get it to work --- is this OK from a security standpoint? My settings are attached. Thanks for all your hard work and dedication. It's very much appreciated.
-
[Support] binhex - SABnzbdVPN
Am not sure if I'm leaking DNS info. I just checked and this was the result: (I'm using Torguard, and that IP is a Torguard IP) (I used this tool.) Your IP: 45.128.36.XXX [United States of America AS9009 M247 Ltd] You use 4 DNS servers: 108.162.218.141 [United States of America AS13335 CloudFlare Inc] 172.70.109.93 [United States of America AS13335 CloudFlare Inc] 172.70.109.125 [United States of America AS13335 CloudFlare Inc] 172.70.113.21 [United States of America AS13335 CloudFlare Inc] Conclusion: DNS may be leaking. Thoughts about this? Thanks.
-
Trying to route containers through a VPN container - it works, but I can't get the WebUI running
I followed SpaceInvaders directions (very similar to other guides on the same subject). I have binhex-sabnzbdvpn container running and working well. I also have binhex-radarr and binhex-sonarr running and working fine. I wanted to run the radarr and sonarr traffic through the VPN container. So, I followed the directions - changed network on radarr and sonarr to none and put the --net=container:binhex-sabnzbdvpn in the extra parameters line. Then I added the sonarr and radarr ports as ports on binhex-sabnzbdvpn. I restarted everything. It seems to work - when I curl my public IP from sonarr or radarr, it is from the VPN. So, traffic is being routed through the VPN container. But, when I go to try to get to the WebGUI - unraid-ip:7878 or unraid-ip:8989, it does not work. It just hangs and won't connect. I can see in the logs that the containers are working - pulling NZBs and passing them to binhex-sabnzbdvpn. But I can't get to the WebGUI. Any suggestions? Thanks. OK - I added the Sonarr and Radarr ports to the VPN_INPUT_PORTS variable in binhex-sabnzbdvpn docker. And now it works. BUT - in the documentation, it has this warning, "configuring this incorrectly with the VPN provider assigned incoming port COULD result in IP leakage" Is this something to worry about in this use case? Thanks.
-
[Support] binhex - SABnzbdVPN
How to I use a different port from 8080? It's already in use by another container (Swag). I tried changing it in the docker config (Host port 1). I tried deleting that port and adding it back in. I tried editing sabnzbd.ini and changing 8080 to 8787. When I restart the container, the config file gets overwritten with 8080. No matter what I try, it keeps using 8080 (and the long says "listening on port 8080"). Do I have to use 8080? Am I just not understanding how to set this up? Thanks.
-
[Support] Linuxserver.io - Snapdrop
I'm having the same issue. Were you able to solve this?
-
[Support] Linuxserver.io - SWAG - Secure Web Application Gateway (Nginx/PHP/Certbot/Fail2ban)
Is this expected behavior? From outside my home network, going to https://my-ip takes me to the Swag splash page. Right now, I have 4 unRAID dockers set at duckdns.org, and those all work. I was just surprised to see that my home ip by itself does this. Is this OK?
-
[Support] Linuxserver.io - Nextcloud
I never did any manual setup. What I did do is install the NextCloud official from Community Applications. It did not have a GUI - so I deleted that docker and installed the Linuxserver Nextcloud. As soon as I installed it, it just worked. No configuration needed. So, is it possible that my first install set up the database? I don't really understand what happened, but I not have a working instance of NextCloud using the default Linuxserver settings..... Thanks.
-
[Support] Linuxserver.io - Nextcloud
I installed this from Community Applications, and it just worked. I also have a reverse proxy set up. Can I just use it "out of the box" or do I need to go through the setup described in the OP (e.g., MariaDB)? Do I need to change anything in the configuration file? I've been running it like this for a few days, and it seems to work great. Should I delete this docker and start over with the more extensive set up instructions? Thanks.
-
[Support] jbreed - nessus
Thank you for this docker. I'm getting an error when I try to launch the GUI: Your connection is not private Attackers might be trying to steal your information from MyServerIP (for example, passwords, messages, or credit cards). Learn more NET::ERR_CERT_INVALID Is this a problem? I can't start it in Chrome, but if I use a different browser, I can override these warnings and get to the startup page... Thanks.
-
Re: Format XFS on replacement drive / Convert from RFS to XFS (discussion only)
Hi - I just wanted to follow up. I know this information is redundant, but I wanted to write it up for any other novices who are trying to do this and have the same questions I did. This procedure worked well - for me. YMMV. I'm on unRAID 6.8.3. 1. Make sure you have enough space to empty or copy (completely) one of the drives. 1. Run "Docker Safe New Perms" form the Tools menu (this is installed as part of the Community Applications) 2. Use unBALANCE to move OR copy from one drive to the others. This is pretty straightforward - you choose move OR copy FROM and specify which TO drives (just don't use the cache drive), and then select all the folders. Click Plan and then run it. This will take a long time to run - for me it was like 48 hours for 5.5Tb. You can use copy or move - it doesn't matter at all. But I was told that copy is faster, since you don't have to wait for the files to be deleted off of the "from" disc and for parity to be updated. Again, it doesn't ultimately matter. 3. When everything is done (and you don't see any errors from unBALANCE), stop the array. 4. Click on the name of the disc that you copied FROM (the one that either now is empty if you moved or still has data, if you copied). On the next screen, under File System Type, choose XFS, click Apply and Done. 5. Restart the array 6. The disc you changed will now say "unmountable." At the bottom of the screen - you will see the option to format - you will have to click a button saying "I really want to do this." It will then format the disc - will take about a minute, and then it will be part of your array. 7. Repeat this process with other discs, starting with Step 3. Remember to turn off your Dockers - if they are set to auto-run, they will have started up with you restarted the array.
-
Re: Format XFS on replacement drive / Convert from RFS to XFS (discussion only)
Ahh. OK. I get this now. When I format the drive, parity knows this. Versus formatting the drive and then parity freaking out. Thanks!
-
Re: Format XFS on replacement drive / Convert from RFS to XFS (discussion only)
Thanks for these instruction. I am using the Wiki entry - am at unRAID 6.8.3. Unlike the Wiki directions, I moved the data - not copied. I do not use inclusions/exclusions, and I wanted to preserve parity during the process. I used unBALANCE to scatter the files from one drive to the rest. Now I'm ready to format the empty drive. The directions seem specific to having two mirrored (copied) drives. Do they differ for me, since I moved the files? How do I format the drive while not having to rebuild parity. Thanks!