• 0 Posts
  • 81 Comments
Joined 2 years ago
cake
Cake day: December 14th, 2023

help-circle





  • Dust and jank you say? Behold, my old basement homelab when I rented just outside Boston with a very permissive landlord who agreed to let me have Comcast gig pro fiber pulled into the basement, running off an outlet I installed without asking on a free slot in our breaker box. The dust was terrible, the rack was a hodge podge, I had to put up that sign because maintenance guys kept plugging their power tools into the UPS when I wasn’t around and tripping it. But Comcast fucked up the billing and the 2gig + 1gig symmetric internet is still active to this day for free, which I left behind minimally working for the next tenants after parting out the rack. The tower by the side was a friend who wanted to colocate on my fiber, and I had some fun stuff like a slide out vga console. I also pulled Ethernet into every room, most of them installed with nice wall plates all bundled down to the rack, so with a house full of gamers, you could have multiple people pulling a gig on a game download without anyone stepping on anyone else’s toes.








  • It looks like it’s about helping to audo deploy docker-compose.yml updates. So you can just push updated docker-compose.yml to a repo and have all your machines update instead of needing to go into each machine or set up something custom to do the same thing.

    I already have container updates handled, but something like this would be great so that the single source of truth for my docker-compose.yml can be in a single repo.


  • BakedCatboy@lemmy.mltoSelfhosted@lemmy.worldWhat's gluetun?
    link
    fedilink
    English
    arrow-up
    12
    ·
    7 months ago

    I use gluetun to connect specific docker containers to a VPN without interfering with other networking, since it’s all self contained. It also has lots of providers built in which is convenient so you can just set the provider, your password, and your preferred region instead of needing to manually enter connection details manage lists of servers (it automatically updates it’s own cached server list from your provider, through the VPN connection itself)

    Another nice feature is that it supports scripts for port forwarding, which works out of the box for some providers. So it can automatically get the forwarded port and then execute a custom script to set that port in your torrent client, soulseek, or whatever.

    I could just use a wireguard or openvpn container, but this also makes it easy to hop between vpn providers just by swapping the connection details regardless of whether the providers only support wg or openvpn. Just makes it a little more universal.







  • If you search for pfsense alias script, you’ll find some examples on updating aliases from a script, so you’ll only need to write the part that gets the hostnames. Since it sounds like the hostnames are unpredictable, it might be hard as the only way to get them on the fly is to listen for what hostnames are being resolved by clients on the LAN, probably by hooking into unbound or whatever. If you can share what the service is it would make it easier to determine if there’s a shortcut, like the example I gave where all the subdomains are always in the same CIDR and if one of the hostnames is predictable (or if the subdomains are always in the same CIDR as the main domain for example, then you can have the script just look up the main domain’s cidr). Another possibly easier alternative would be to find an API that lets you search the certificate transparency logs for the main domain which would reveal all subdomains that have SSL certificates. You could then just load all those subdomains into the alias and let pfsense look up the IPs.

    I would investigate whether the IPs of each subdomain follow a pattern of a particular CIDR or unique ASN because reacting to DNS lookups in realtime will probably mean some lag between first request and the routing being updated, compared to a solution that’s able to proactively route all relevant CIDRs or all CIDRs assigned to an ASN.