RagingHungryPanda

I have a gl-inet router on which I have an nginx config to send traffic to Nginx Proxy Manager and DDNS with cloudflare.

I'm trying to get some kind of local dns set up so that if I'm on the local network, traffic stays within the network. The problem that I'm running in to is SSL certificates. NPM (on the server) is handling those and I thought that what I could do is go into the AdGuard Home (on the gl-inet router) config and add a dns rewrite to point to the router and traffic would flow as it normally does.

This DOES work, technically. traceroute shows only one hop for any of my subdomains, ie files.mydomain.com.

But I cannot actually get access in a browser because the ssl certificates are not set up.

It seems like options are: manually copy certificates from the server to the router (not ideal), or don't do it at all. I notice that if I go to the service by ip address, it'll change the address to the domain name. Eg going to 192.168.8.111:30027 -> files.mydomain.com.

This isn't a HUGE deal, but it's not preferable. How have you all solved this?

Edit: I solved the issue in probably the most hilarious way. I was trying to get the forwarding and everything set up and then borked my routers firewall so bad I couldn't get to the outside at all, so I did a hard reset.

I then moved my admin UI ports up by one each (81/444), re-set up Goodcloud, ddns, Wireguard server on the router, then set up port forwarding for 80/443 on the router to 80/443 on the trunas server. I switched NPM to listen on those ports (since I moved the web UI to different ports), then added Adguard Home DNS rewrites. It's now all working as expected.

Local traffic only has one hop and is accessible without SSL warnings, and same for WAN traffic. Thank you all for the help!

I've been getting into self hosting, the fediverse, and federated blogging. I contacted freaking nomads and they suggested that I write about my experiences, so here it is! I hope you enjoy.

Comments aren't fully federated from the blog site, so I'm using mastodon as well.

I've been getting into self hosting, the fediverse, and federated blogging. I contacted freaking nomads and they suggested that I write about my experiences, so here it is! I hope you enjoy.

Comments aren't fully federated from the blog site, so I'm using mastodon as well.

An article on the emergence of literature as a tool of Zionist propaganda.

https://www.peoplesworld.org/article/how-literature-inspired-then-justified-zionism-ghassan-kanafanis-on-zionist-literature/

Starting at midnight Thursday night through midnight Friday night, we will be joining with people across the country and beyond to demonstrate our collective outrage over the hostile takeover of our government by unelected billionaires and by those who put profits before people.  For one day, this Friday, we pledge not to buy anything from any major online or in-person retailers, and we pledge to refrain from using credit cards.  We recommend staying away from Facebook, Instagram, and “X.”   

This action began as a protest against those corporations who abandoned diversity, equity, and inclusion programs to placate a white supremacist administration.  Those corporations include Target, Citi Bank, Google, and Disney.  It quickly expanded into a “Buy Nothing Day,” with particular recognition of the role of finance capital.  The concept of Economic Blackout 2/28 has quickly spread on social media, propelled by activists, faith communities, students, and rank-and-file workers everywhere.  The movement goes beyond our borders. In Canada, consumers will target USA-based companies to protest Trump’s tariffs, and Mexicans will participate in the Latino Freeze Movement to protest US anti-immigrant and anti-DEI policies.

Please participate in this action! It is a simple act that we all can accomplish and that can quickly add up to a collective impact. 

Sign our pledge today!

In resistance,

National Board, CPUSA

I'm trying my hand at federated blogging! Here's a bit on some things that I got rid of and some things that I added while traveling as a nomad.

I'm starting to get in to self hosting and am looking at self-hosted blog solutions. It looks like WriteFreely is the main fediverse blog platform, with Plume as second though I don't see it used much.

But that got me thinking that it'd be good to follow federated blogs and have some long form reading that I follow, like we did back when RSS was the main way of doing things.

But how do I actually find bloggers? It looks like WriteFreely can federate with Mastodon, but it doesn't look like there's a federated blogging platform like lemmy or mastodon. Is this correct? Where I can I go (other than Medium) to find blogs and bloggers in the fediverse?

I previously posted about an issue where the nginx container for the Collabora application logs a GET to /robots.txt every 10 seconds. I tried modifying the files in the container, but they were reset on restart. I also tried to run the container with --log-driver=none, but was unsuccessful. Despite being a software dev, I'm new to the homelab world and trunas.

I solved it by changing the docker image and then committing those changes. The change I made was to set access_log off; in the nginx config. I did it at the server root because I don't really care about those logs for this app, but it could be done on the location level.

Here's how I did it: Here's the reference SO post that I used: https://stackoverflow.com/a/74515438

What I did was I shelled into the image:

• sudo docker exec -it ix-collabora-nginx-1 bash
• apt update && apt install vim
• vi /etc/nginx/nginx.conf and add the access_log off;
  • if you're not familiar with vim, arrow key to the line you want then press 'a' to enter "append mode". Make your change, then esc, :wq!. You need the ! because the file is read only
• apt remove vim
• exit
• sudo docker commit <image id>
• sudo docker restart ix-collabora-nginx-1

I'm running TruNas Scale with a docker image for NextCloud and Collabora. Under Collabora, the nginx application is logging a GET to robots.txt about every second and I'm having a hard time filtering this out because it looks like the conf files for nginx get replaced on every restart. I also tried mounting my own version of the nginx.conf file, but that didn't reflect any changes.