Mama told me not to come.

She said, that ain’t the way to have fun.

  • 1 Post
  • 113 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle
  • But it’s named after an American state, so I’m claiming it. Oh, and we put pineapple on a lot more than just Hawaiian pizza, just yesterday I had pineapple, pepperoni, and jalapeno, no Canadian bacon whatsoever, and my wife likes philly steak, pineapple, and jalapeno.

    Just like how we stole pizza from the Italians, we’ll also stole Hawaiian pizza from our friends up north. It’s nothing personal. 😜


  • Heathen!

    I do like pineapple on pizza, if it’s properly dried (nobody wants soggy pizza). But I consider American pizza to be an entirely different beast than Italian pizza, they’re not the same dish at all. With American pizza, pretty much anything goes, and generally the more toppings the better. But Italian pizza should be simple and cooked in a brick oven. Even my uncultured yankee self understands that much. 😆




  • Hmm, I’ve had spaghetti with meat sauce quite a bit and it’s not really an issue (i.e. spaghetti bolognese).

    That said, we don’t eat pasta very often (again, American), and I don’t like Italian much anyway. But I’ve done bolognese, carbonara, alfredo, aglio e olio, pesto, marinara, etc, all with spaghetti noodles and it’s fine. I’ve also done most of those with penne, farfalle, fettuccine, and others. Pick your noodles, pick your sauce, and go to town.

    I’ve never been to Italy, so I’m guessing a lot of those pairings are very much non-traditional, but they all seem to work fine.



  • I personally have them be the same device, but I have a DIY NAS, so my specs are already way overkill for regular NAS duty (it’s my old desktop PC).

    Assuming your home network is fast, you should be fine to split them up. I personally designed my setup to make it easy to move things around should I decide to. I use Docker containers for everything, Caddy for TLS, and HAProxy set up at the edge to route based on domain, so moving a service to another device is just:

    1. copy relevant docker compose and Caddy config to new machine
    2. set up network mounts for anything the containers need
    3. point HAProxy (and my router DNS) to the new address
    4. test

    I don’t have to remember where any of the config files are since they all live next to the compose file. I also don’t need to forget which directories need to be mounted because it’s already listed in the compose file.

    So as long as you make it easy for yourself to move things around, it really doesn’t matter where your actual data lives.




  • Yup, I have a Mikrotik and love it. I haven’t fully explored the possibilities, but so far I have:

    • DNS server - traffic to my NAS uses my domain name, but everything stays on my network (so I get TLS, without hitting the internet)
    • VLANs - haven’t fully configured yet, but I’m working on segmenting my network based on access needs; I currently have two SSIDs I’m playing with
    • Ubiquiti AP - absolutely solid, though running the server is really annoying, especially since the machine it’s on is only connected via WiFi (so I have to drag the AP down every time I need to re-pair it if I break my wifi)

    If you want a professional setup but don’t want to pay a ton, Mikrotik w/ Ubiquiti AP is affordable and very capable. All in, I think I spent $70 on the router and $100 on the AP, so $170 for an “enterprise grade” network. I’m planning to upgrade the AP soon, and it’s nice to not have to reconfigure the router, I’ll just add the AP, configure in the software, then remove the old AP.


  • But Ubiquiti can absolutely work in mesh mode, what exactly is your friend looking to solve?

    I personally have a Mikrotik router (just router, no wifi) and one Ubiquiti AP, which gives really good coverage in my house. I’m going to be getting faster speeds soon (city is rolling out muni fiber), so I’ll want something better than my current AC AP since the 5MHz band doesn’t cover my whole area and technically can’t saturate gigabit (I might try out 10 gbit, but I’d need a new router). So I’m thinking of running a bunch of cable and getting two U6 Lite APs and then switching to wired for our desktops. I could probably even keep using my AC AP, and just put the U6 where people will more likely get closer to the max (probably downstairs where we play games).

    My main concern with a mesh setup is that, while it’s easy to set up, there would be added latency from going through repeaters and whatnot vs two APs with a direct line to the router working off the same SSID. Running cable kinda sucks, but the total cost seems about the same between a mesh setup and a dedicated AP setup.



  • If that works for you, great. But a self-hosted service offers a lot of convenience for a relatively small amount of added risk. Some things I like about Bitwarden/Vaultwarden:

    • can share logins easily w/ my wife, while each having our own passwords
    • nice UX for my phone and desktop (prompts for most apps that require passwords)
    • web vault so I can access my logins if I don’t have my phone with me (e.g. lost phone while traveling)

    And since it’s self-hosted, I’m far less likely to be targeted than the official Bitwarden instance since an attacker would need to know my domain, as well as being able to exploit the vulnerability through my multiple layers (requests go through HAProxy, my VPN, and Caddy before getting to Vaultwarden). I can make it even more secure by putting it inside my VPN (I have mine routed outside my VPN for the web vault access).




  • I ended up making my router my DNS server, so if my router goes down, the internet is down anyway. I have static routes for things on my LAN, so if I hit mydomain.com, I can route it to an internal address instead of going over the internet. So far it works pretty well.

    That said, I don’t have a PiHole setup, so I don’t know if that complicates things (I’m guessing pointing the router at the PiHole with a fallback to external DNS would just show ads or whatever if the PiHole is down).

    But yeah, having a quick fallback is important. I think that should be as automatic as possible.


  • Do you need a backup image?

    For my NAS, all I do is:

    • keep notes of what’s installed and how to configure OS things
    • automatic, offsite backups of important configs and data

    Any full-disk backups just make the restore process easier, they’re hardly the primary plan. If you want that, just take a manual backup like once a year, and maybe swap them out every 2-3 years (or however long you think the SD card should last). If you keep writes down, it should last quite a while (and nothing in your use-case seems write-heavy).

    But honestly, you should always have a manual backup strategy in case something terrible happens (e.g. your house burns down). Make that your primary strategy, and hot spares would just be a time-saver for the more common case where HW fails.