[-] Lemmling@lemm.ee 1 points 2 months ago

Hmm strange, I am also in the EU

[-] Lemmling@lemm.ee 1 points 2 months ago

normal reddit is working fine for me. The error page even redirects to the main site.

[-] Lemmling@lemm.ee 2 points 3 months ago

I am behind CGNAT and I have been trying to set up a WireGuard mesh network to connect my local devices, such as a Raspberry Pi and Proxmox server, as well as my mobile devices, using a VPS as the central point. The goal is to expose locally running applications to the internet without relying on Cloudflare, as they do not allow video streaming and remote access to my local devices. I have looked at many tutorials on this topic, but they often left me confused due to the varying iptables rules and configurations. Some tutorials include specific device names like eth0 in the iptables rules, while others use variables like %i. Additionally, some examples have special rules for SSH access like this one. Apart from that, I am unsure about what additional steps I need to take when I want to run one of the peers as an internet gateway. Despite the confusion, I managed to achieve the basic mesh network setup without implementing any iptables rules for PostUp/Down. Each device in the network receives an IP address within the WireGuard subnet (10.0.0.x) and can ping one another. However, I believe that the iptables rules mentioned in the tutorials would allow accessing other subnets, such as my local LAN, through the WireGuard VPN. I am still uncertain about the exact mechanism behind how these rules work in that context and how to properly configure them for my specific use case, especially considering the CGNAT situation

[-] Lemmling@lemm.ee 3 points 3 months ago

Thanks for the nice writeup. Can you explain why you have these rules.

PostUp = iptables -t nat -A PREROUTING -p tcp -i eth0 '!' --dport 22 -j DNAT --to-destination 10.0.0.2; iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source SERVER-IP PostUp = iptables -t nat -A PREROUTING -p udp -i eth0 '!' --dport 55107 -j DNAT --to-destination 10.0.0.2;

What happens if you remove it ?

[-] Lemmling@lemm.ee 14 points 3 months ago

Immich having accounts+SSO is the single best feature IMO. Thanks for your thoughts on the topic.

[-] Lemmling@lemm.ee 37 points 4 months ago* (last edited 4 months ago)

Why do people repair their polish ??

[-] Lemmling@lemm.ee 1 points 4 months ago

I faced the same problem when trying to run two SSDs connected via USB in btrfs raid0. I used a cheap 30W power brick from amazon. You can see dmsg warnings about this. Look for low voltage/current. Problems were resolved after using the official Raspberry 5 power brick.

[-] Lemmling@lemm.ee 5 points 8 months ago

I see the option now, Thanks 😄

[-] Lemmling@lemm.ee 1 points 8 months ago
[-] Lemmling@lemm.ee 5 points 8 months ago* (last edited 8 months ago)

Yeah all Indians are vegetarians and look exactly like this /s

[-] Lemmling@lemm.ee 1 points 8 months ago

I agree also organization of your code

[-] Lemmling@lemm.ee 9 points 10 months ago

Now I have to self host mastodon to join the party 🥳

view more: next ›

Lemmling

joined 10 months ago