When you get a 502 it usually means that your reverse proxy is unable to connect to your backend server. I’m not sure if you’ve obfuscated the URL in your post but 0.0.0.0 is not a valid IP (it just means ALL IPs). If you are attempting to connect on the same machine that is hosting use 127.0.0.1. if you are on the same network then use the local IP.
Neat visuals but I don’t think this is in any way accurate… Tell me how I crossed all those lightyears in about 60 seconds while only traveling at around 95% the speed of light.
You can do this with a site-to-site wireguard VPN. You will need to set up the proper routing rules on each termination. On the Internet facing side you will want to do DNAT (modifies destination, keeps source) to redirect the incoming traffic to your non- internet facing side through the tunnel. Then on the non- internet facing you need to set up Routing rules to ensure all traffic headed for public IPs is traversing the tunnel. Then back on the Internet facing side you need to SNAT (modify source, keep destination) the traffic coming through the tunnel headed for the Internet. Hopefully this helps. People saying this goes against standards are not really correct as this is a great application for NAT.
Maybe not the lowest power possible… I wouldn’t recommend running your NAS on a raspberry pi even though plenty of people do
I’ve got a 3800x that has plenty of performance but also uses a lot of power and I’m seriously considering upgrading to a 5700G. It’s about 170 from Amazon right now.
Also, I don’t think you’re going to want your NAS to sleep/standby, that’s really not typical.
I wonder if this is the cause for the UI failing and showing a white page with “server error”. It has something to do with a failure to retrieve the site icon and if postgres is crashing that could explain why lemmy-ui is failing to retrieve the site icon.
My current “fix” for this is a script that runs every 10 minutes and sets the site image to NULL, curls the site URL, then sets the site image back to what it was. This does seem to work around the problem and if the UI does crash it’s only down for a maximum of 10 minutes.
Very nice walkthrough. Gonna bookmark this.
Port 8080 is where the Web-UI / Web-API is running. If you want to be able to upload data and not just leech you need to forward port 6881 (and probably also tell QBT to listen on that port)
Since 0 comes before 1 you’re probably gonna need to rename the files and possibly the metadata as well. Probably gonna need a custom numbering scheme to do what you want to do.
I don’t know how many things you’ve made in a microwave but most people know you have to let it sit for a minute after the microwave goes off for even heat distribution (or if you dont want to wait the full minute - give it a stir and zap it for another 20 seconds). The article you linked stated that microwaving is different because the hot water rises to the top and won’t sink back to the bottom, duh! - that’s how hot water works in a gravitational field.
Good luck. Brits, for some reason, believe that microwaving your tea water is somehow blasphemous. I mean, it’s not like you put the tea in the kettle when you boil water just the same as you don’t put tea in the microwave while boiling the water. I guess the US doesn’t have a monopoly on idiots.
For a VPN I picked privateinternetaccess (PIA) because it has port forwarding and I got a deal on a 5 year subscription for a one-time payment of $75.
Give it a couple hours or even a day. Stay active in the communities you subscribe to. Eventually your server will get most posts and comments.
Not sure if you use OPNSense, but the acme plugin allows you to automatically upload certificates (via ssh) to the appropriate servers whenever the certificates are updated.
One other way would be to use a reverse proxy internally (if you only need SSL for web interfaces).
Packets initiated from the NAS to the Internet are allowed. Packets initiated from somewhere on the Internet to the NAS are not allowed.
If the NAS requests files from a download server they will be allowed to come through the firewall because the files are a response to a request and not unsolicited traffic. I hope that makes sense.
Vaultwarden password manager
You can do all of those things with wireguard as well… I’m not seeing any benefit to running Tailscale/headscale.
If you don’t have a static IP then you will automatically have a dynamic one. You don’t need to ask for a dynamic IP as that is the default. And I’m no idiot, I’ve used dynamic DNS services for for over 20 years.
If you’re going to do that you may as well cut out the extra server/service and run regular wireguard.
Fresh Graphene. In order to get stock Android back you would need to install it back on your phone. A factory reset removes all data, settings, and apps that were put on the phone by the user.