Mastodon

  • 1 Post
  • 77 Comments
Joined 3 years ago
Cake day: June 8th, 2023
  • BlueÆther@no.lastname.nztoAsklemmy@lemmy.ml•What's the weirdest thing you saw on the road this year?English
    8·
    10 days ago

    Just yesterday ther was a flatbed ~20T truck parked in the middle if his lane, with a cop car with lights all on parked in front - I couldn’t notice the off hand corner. I get past, with the cop waving me through to see 1/2 a powerpole just hanging off the lines, all the HV lines still intact.

    Driving in to work this morning I slow down to see what had happened. A good 50m of dual tire skid-marks (on a straight bit of road), suddenly heading off the shoulder and into the grass, clipping the (now replaced) pole, coming back on to the road, and stopping exactly where the truck from the previous day was parked.

    Good job on getting the truck back on the road

  • BlueÆther@no.lastname.nztoSelfhosted@lemmy.world•Good resources for setting up a domain name to a local Caddy instanceEnglish
    4·
    2 months ago

    I have AdGuard Home running on OPNSense as a local DNS with a wild card for for the ‘local domain’ pointing to Caddy

    in Caddy I have this section:

    *.<domain>.net {
#header X-Frame-Options "SAMEORIGIN"
        tls internal
        encode gzip
        import sec-headers
        @sub1 host pve.<domain>.net
        @sub2 host kasm.<domain>.net
       ...
       handle @sub1 {
                import sec-headers
                reverse_proxy * https://10.1.1.11:8006/ {
                        transport http {
                                tls_insecure_skip_verify
                        }
                #       header_up Host {host}
                       header_up X-Real-IP {remote}
                       header_up X-Forwarded-For {remote}
                       header_up X-Forwarded-Port {server_port}
                       header_up X-Forwarded-Proto {scheme}
                }
        }
        handle @sub2 {
                import sec-headers
                reverse_proxy  https://10.1.1.119/ {
                        transport http {
                                tls_insecure_skip_verify
                        }
                #       header_up Host {host}
                       header_up X-Real-IP {remote}
                       header_up X-Forwarded-For {remote}
                       header_up X-Forwarded-Port {server_port}
                       header_up X-Forwarded-Proto {scheme}
                }
        }
...
  • BlueÆther@no.lastname.nztoSelfhosted@lemmy.world•3 days ago I said I needed a new hobby...English
    5·
    2 months ago

    Back up the server then work through:

    Just follow the guide https://iocaine.madhouse-project.org/documentation/3/getting-started/ Bind the iocaine service to 0.0.0.0:42069

    cat /opt/iocaine/etc/iocaine/config.d/00-server.txt.kdl 
http-server default {
  bind "0.0.0.0:42069"
  use handler-from=default
}

    expose interface to Docker (make sure not to expose it to the world).

    sudo iptables -I INPUT 4 \
  -s 172.18.0.0/16 \
  -d 172.18.0.1 \
  -p tcp --dport 42069 \
  -j ACCEPT

    add the interface to the proxy service in a custom/docker-compose.yml.template

    proxy:
    {{COMPOSE_CADDY_IMAGE}}
    env_file:
      - ./caddy.env
      - {{ CADDY_EXTRA_ENV }}
    volumes:
      - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy_data:/data
      - caddy_config:/config
    extra_hosts:
      - "host.docker.internal:172.18.0.1"
...

    add iocaine to caddy in a custom/Caddyfile.template

    {$LEMMY_HOSTNAME} {
        import caddy-common

        ######################################
        ########## iocaine  code ##########
        @read method GET HEAD
                reverse_proxy @read host.docker.internal:42069 {
                @fallback status 421
                handle_response @fallback
        }
...

    rebuild all the docler images (at least the caddy one ./deploy.sh -f) and test

    I think that should work

    CrowdSec