• 3 Posts
  • 20 Comments
Joined 1Y ago
cake
Cake day: Jul 13, 2023

help-circle
rss

If you are not too stuck on bsd

Not really. It’s more out of the curious of how DragonflyBSDs HAMMER2 filesystem works. I’ve good things about it and ZFS on FreeBSD. ZFS on Linux I’ve heard is still getting up to where it is on FreeBSD.


It’s the interest in how well the HAMMER2 filesystem works for everyday storage, as well as how swapcache performs. Not much besides that, plus I’ve generally decent experiences with Net and OpenBSD.

https://www.dragonflybsd.org/performance/


If you really want Intel, just get an N100 or N300. Low power, Intel HW transcoding on iGPU on Linux kernels 6.3+, and can handle Jellyfin no problem.

Didn’t think about that either. I’m finding I didn’t give this as much thought as I should’ve.

You can get a minipc with everything you for $175 for a no name brand, or maybe $250 for a more well-known brand.

But why do that when I could spend +$600? 😜


Good point. So what we’re really talking about then is

  • something like a raspberry pi
  • 1 or 2 hard drives for base storage
  • 1 external hard drive as a backup

I’m beginning to realize I haven’t looked into this as much as I should’ve. 😅 So for most people, with what @AtariDump@lemmy.world has mentioned, a raspberry pi with 1 or multiple hard drives (if you really want) is a good start.


As the project mentions:

Even though there are builds available online for these platforms, they are unofficial and from a separate project. If you do encounter issues on these platforms, please ask for support in their respective support channels first.

This that project:

https://github.com/Thefrank/jellyfin-server-freebsd


Ah, okay. So, if I understand correctly, unless I’m trying to have Jellyfin do what YouTube does with offering multiple resolutions and bitrates for video, I don’t need to bother with looking for a GPU that’s good at video transcoding?


Great point. I don’t know why I didn’t think about that.


Recommendations for Hardware for Physical Media/Jellyfin Server
### Initial Thoughts Hello friends! This is something that's been muddling around in my mind for a bit, in part because I now have a decent collection of DVDs, and I am starting get a digital collection of shows that are a bit hard to find. I'm also interested in the fact that there's a [TubeArchivist plugin for Jellyfin](https://github.com/tubearchivist/tubearchivist-jf-plugin), as media archival interests me and YouTube is starting to suck with Google's position on ad-blocking. It would be nice to be able to access this stuff anywhere as well, so creating a media/Jellyfin server seems like a good solution. Thing is I'd rather have a physical server than pay a bunch of monthly fees for VPS hosting. Not knocking it of course, but on top of monthly fees I also have my skepticism about VPS hosts and if they're sharing data with people regarding my use of their service. ### Completely wishful thinking setup I'm not so much of a hardware guy as I am a software guy, funnily enough, but to give you an idea of what I would like here's my admittedly wishful thinking of what I'd like for a setup: - [DragonflyBSD](https://www.dragonflybsd.org/) as the server OS, utilizing it's HAMMER2 filesystem and [swapcache](https://www.dragonflybsd.org/performance/) as I've heard great things about those. - Jellyfin, obviously. - NVMe SSD storage with some level of RAID. - Intel GPU, as I've *heard* they're very good at video decoding, but I've not looked into evidence of this. - Whatever CPU and RAM I can get good performance out of without wasting money. - Add it to the Wireguard network so I can watch stuff anywhere. A few things with this: 1. I don't know how up-to-date DragonflyBSD's [dport of Jellyfin](https://github.com/DragonFlyBSD/DPorts/tree/master/multimedia/jellyfin) is, but maybe this is something worth contributing to. 2. God only knows if the new Intel graphics card drivers work well on the BSDs. I know all of the BSDs basically just pull from the official Linux firmware for graphics (I think?). 3. I'd have to figure out if any other hardware would not play well with DragonflyBSD, probably not too big of an issue but it's still something to look out for. 4. Cost of hardware. ### Wrap up Overall it probably be just me and my wife who would use the server, mostly me. Maybe some immediate family, a few friends, maybe down the line use it for kids when we have them. What are your recommendations?
fedilink

Tailscale just partnered with Mullvad so this works out of the box for that setup: https://tailscale.com/blog/mullvad-integration/

Ah I literally saw that post here a few days ago! How could I forget about that? I might just switch over to Mullvad. Way cheaper, I can downgrade the Proton account I have (I’ll still use their email service until I have time and figure out how to self-host my own email) and I can use Mullvads encrypted DNS servers until I can configure DNS-over-HTTPS + Unbound on my PiHole.


Force tailscale to route all traffic through the DERP servers?

No no, sorry. I mean can I still have all my network traffic go through some VPN service (mine or a providers) while Tailscale is activated?

So if I’m torrenting something, I don’t have to turn off Tailscale on that device and switch on a VPN before I start the torrent process?

I’m going to guess either “no” or “yes, on paper, it’s possible.”


To a first approximation, Tailscale/Headscale don’t route and traffic.

Ah, well damn. Is there a way to achieve this while using Tailscale as well, or is that even recommended?

Are younreally expecting 10gb/s speeds over your encrypted links?

Eh, no. You have a good point there. I mean in a more perfect world that would be wonderful, but that’s not the case.


Cost Benefit: Tailscale vs. Tailscale w/ Self-Hosted Headscale Instance vs. VPN Provider
Hello friends! For awhile now I've wanted to delve into self-hosting and the first thing I thought of was ditching my VPN Provider for my own VPN solution. I wanted to ask about the cost/benefit of each option with those of you who are more experienced. ## Option One: Stick with my VPN Provider: This is a funky case, as my VPN Provider is with Proton, and my email and VPN accounts are linked together. Since I've been with them for awhile, I have over a gigabyte of storage for emails. I rarely ever get past 400MB. The VPN is fine, occasionally I have some hiccups with speed but it overall works. I pay roughly $19.20/month for both a paid email account and the VPN service, so it's likely the second cheapest. When it comes to privacy, though, I'm not 100% sold Proton wouldn't just sell my data for no reason. Yes, they are Swiss, but that doesn't entirely reassure me. The weird thing about this is my PiHole is decoupled from the VPN. At least in the mobile app, I see no option to use your own DNS. There's also no provided way nor really an obvious way for me to connect to all of my devices if they're all on ProtonVPN, as opposed to the other two options. ## Option Two: Just use Tailscale Personally I'd like to mess with the ACLs so probably I'd wind up with the $6/month plan. For the $18/month plan I don't really know what "Tailscale SSH" even means, as I don't know what magic they do to wrap SSH into something worth paying for. I've heard mixed things about "Tailscale Funnel." I hear Tailscale is easy to install and there's no real extra fidgeting you'd have to do for your home network. Tailscale will also let me use my PiHole as my DNS, getting me ad-blocking from PiHole on all devices on Tailscale. ## Option Three: Self-Hosted Headscale This is one I'm interested in, but I don't know the feasibility of it. The initial idea was to get a VPS and install OpenBSD on it and make it my Headscale instance. I've installed OpenBSD before, I mostly know my way around it and I like how lightweight it is and how security focused it is. There would be more setup initially, but I don't really mind that. I do a lot of fidgeting on my Linux desktop anyway. The main thing for this is cost. I don't really know what performance specs for a VPS I would need to reasonably have good network performance with ~10 devices, though I'm guessing I'll have to have something =<10Gbsp. So maybe $25-$30/month depending on who I buy a VPS through? The other thing is updating stuff. I can just SSH and do all of that manually and since the VPS will be dedicated specifically to being a Headscale server, but that is still time I have to spend. Lastly, I wouldn't have the international selection of VPN locations like with a VPN provider, just one, but it's not like I'm trying to bounce my connection from country and that's not advisable anyway. ## Other options Setting up a VPS with Wireguard myself. While I wouldn't mind it too much, Tailscale exists for a reason and it can traverse firewalls without me having to configure a bunch of devices so that's a big plus. Running Headscale in a container on my Linux desktop, but this means my desktop would have to be on almost 24/7 and I don't know how I feel about having my VPN stuff to be sitting directly inside my home network. What are your opinions?
fedilink

Seems like I could potentially get around my issue by taking the device out of this “router mode” setting I found and connecting my Pi to it via Ethernet cable and have the Pi be the router for my network.

EDIT: Actually, scratch that. I don’t think a Pi would be powerful enough to act as a router. Well, off to by a modem (not a combo) it is!



I don’t think there’s anything in the Pi-Hole VPN setup with Wireguard that says you need to open up port 53. In fact, in the Pi-Hole userspace you see so many people specifically saying to not open up port 53.


You’ve supplied the actual network address of your pihole machine and not the 192.168.1.250 address shown, right?

I could’ve sworn I did that but I’ll try again.

EDIT: Okay, I found the specific IP addresses for the Pi-Hole’s DNS servers. I tried putting the 2 IPv4 ones, clicked the applied button and got “Invalid IPs.” But what’s stupid is that I can ping those IPs. There’s something else going on here.

And you’ve set your pihole server up to have a static ip address as well, correct?

Yes I’m pretty sure it’s set to have a static IP address. I’m pretty sure it’s something you have to do when setting up the Pi-Hole.

the spectrum supplied router

Oh I should’ve clarified: this is one I bought myself, not one from Spectrum.___


I know there’s a way to do a recursive DNS with DNS-over-HTTPS. I believe there’s a guide out there on how to do this with unbound and stubby on OpenBSD.


I tried to set the Pi-Hole as the DNS via the instructions here, and the exact settings for the Netgear router is under Advanced -> Setup -> Internet Setup. Everytime I’ve set this, no hostnames can be resolved. I followed the Pi-Hole instructions to a tee, so I don’t know if I’d be missing something. Currently, the Pi-Hole acts as the DHCP server.

Have you made sure you’re on the latest firmware?

I don’t even know how I would do this on this Netgear router. I see nothing in the settings to check for firmware updates, and I don’t recall seeing anything in the manual. I guess I’d have to call their tech support.


It’s a combo. Most are these days, I believe, but I know Spectrum is weird and will give you a router AND modem if you just buy it through them. What device would you recommend? I don’t want to buy one just to find out I can’t set the Pi-Hole as the DNS server on a new one.


As I said to someone else, it must be the Netgear modem. If I go to Advanced -> Setup -> Internet Setup and click Use These DNS Servers and put in the address for the Pi-Hole, it prevents me from doing so. Or, rather, I can set the addresses, but then I have no internet access. Hostnames don’t get resolved, so I’m wondering if I’m missing something?


Hmmm then it’s something with the modem I have then. I can’t set the DNS address. It’s some cheap Netgear modem. If I go to Advanced -> Setup -> Internet Setup and click Use These DNS Servers and put in the address for the Pi-Hole, it prevents me from doing so.


Tips for asking ISP to allow for using my own DNS setup for self-hosted VPN?
Hello, friends. So I've had my Pi-Hole setup for awhile now and it's great. I'd like to get Wireguard working with it, too, so I could browse the internet without loads of ads and trackers on the go. However, small issue. All DNS traffic is forcibly routed to my ISP. If you need some details, I made [this post on the Pi-Hole userspace.](https://discourse.pi-hole.net/t/unbound-not-working-even-with-extra-steps/60117/1) I'm in America and my ISP is Spectrum. I was wondering if there's a way I could convince technical support to allow me to use a recursive DNS for privacy/security (more-so the second of the two) purposes, or if it is even possible to convince them to do this. I don't know if there's a specific number I should contact, email I should email to, or if I just have to endure the nightmare of getting passed around by customer service one Saturday. Any recommendations would be great. An interesting note for anyone who's ISP is Spectrum, their DNS service, at least for me, uses OpenDNS with `dnsmasq-2.57`. That version of dnsmasq is over 10 years old. You see if this is the case for you with ``` dig CHAOS TXT version.bind @192.33.4.12 +short dig CHAOS TXT version.bind @198.97.190.53 +short ``` Or something similar if those IP addresses are different for you. You can see that running those commands were a part of the steps I was asked to take in that Pi-Hole userspace post. **EDIT 1:** For those interested, [here's some Github gist](https://gist.github.com/Jiab77/1cdc2896f22791c4db492e87bbf609ff) I found that shows how to use unbound + stubby for have a recursive DNS + DNS-over-HTTPS. There's also [this](https://dnsprivacy.org/dns_privacy_clients/#unboundstubby-combination) from the DNS Privacy Project. **EDIT 2:** I seems that initial answer from the Pi-Hole forums was correct. There's probably something that was set in the firmware for the Netgear router that prevents me from setting up my own DNS servers. However, I notice on the router there's a "router mode" option that's on, which I can probably turn off, plug in my Pi to the Netgear device and have the Pi act as my router, thus letting me be able to use it as my DNS server as well. That or just suck it up and buy only a modem, not a router + modem combo.
fedilink