Any experience with Pangolin?

robber@lemmy.ml · 8 months

Depends on the version you’re running.

https://forgejo.org/docs/latest/admin/upgrade/from-gitea/

robber@lemmy.ml · 10 months

One reason could be that the audience on lemmy has a left-ish bias and there’s a political component to the Spotify exodus.

Edit: don’t get me wrong, I love seeing content and engagement on here.

robber@lemmy.ml · 1 year

SFTPGo is such an awesome project, never had any problems with it.

robber@lemmy.ml · 1 year

I’ll add Pangolin to the list, it’s a self-hosted Cloudflare tunnel alternative.

robber@lemmy.ml · 1 year

It really depends on how much you enjoy to set things up for yourself and how much it hurts you to give up control over your data with managed solutions.

If you want to do it yourself, I recommend taking a look at ZFS and its RAIDZ configurations, snapshots and replication capabilities. It’s probably the most solid setup you will achieve, but possibly also a bit complicated to wrap your head around at first.

But there are a ton of options as beautifully represented by all the comments.

robber@lemmy.ml · 1 year

Thanks for the hint to pocketID, haven’t heard of it before. That makes me think it’s time to upgrade my auth stack as well.

robber@lemmy.ml · 1 year

That sounds awesome! No issues at all so far?

robber@lemmy.ml · 1 year

Thanks for the list! Do you use Pangolin yourself?

robber@lemmy.ml · 1 year

Hi fellow homelabbers! I hope your day / night is going great.

Just stubled across this self-hosted cloudflare tunnel alternernative called Pangolin.

Does anyone use it for exposing their homelab? It looks awesome, but I’ve never heard of it before.
Should I be reluctant since it’s developed by a US-based company? I mean security-wise. (I’ll remove this question if it’s too political.)
Does anyone know of alternatives pieces or stacks or software that achieve the same without relying on cloudflare?

Your insights are highly appreciated!

robber@lemmy.ml · 1 year

I would recommed to use redundant storage, such as a RAID 1 (or 5 or 6, if you want a more advanced setup). This way your data doesn’t die with your SSD.

robber@lemmy.ml · 2 years

That’s really helpful, thank you. I’ve ordered an AX23 which will arrive tomorrow. I’ll try to figure it out in the next few days and report back.

robber@lemmy.ml · 2 years

Thank you! I’ll evaluate and report back.

robber@lemmy.ml · 2 years

And openwrt is capable enough?

Yeah it’s insane right? Every address is reachable when I open a port range. And it’s like there are ~ 10 predefined services (HTTP/S, SMTP, …) and the category “All other ports” where also 22 is part of. So I really have the choice to either keep everything shut or leave everything wide open.

I think I can’t use my own modem but I’ll have to double check with my ISP. But yes the Wi-Fi is also provided by that router and it’s also quite crappy.

robber@lemmy.ml · 2 years

Thank you! Do you have an example for such a firewall device? Could something like the TP-Link Archer AX55 in IPv6 “pass-through” mode do the job? Or would you go for a standalone firewall? My budget is around a hundret bucks.

robber@lemmy.ml · 2 years

Hey fellow self-hosting lemmoids

Disclaimer: not at all a network specialist

I’m currently setting up a new home server in a network where I’m given GUA IPv6 addresses in a 64 bit subnet (which means, if I understand correctly, that I can set up many devices in my network that are accessible via a fixed IP to the oustide world). Everything works so far, my services are reachable.

Now my problem is, that I need to use the router provided by my ISP, and it’s - big surprise here - crap. The biggest concern for me is that I don’t have fine-grained control over firewall rules. I can only open ports in groups (e.g. “Web”, “All other ports”) and I can only do this network-wide and not for specific IPs.

I’m thinking about getting a second router with a better IPv6 firewall and only use the ISP router as a “modem”. Now I’m not sure how things would play out regarding my GUA addresses. Could a potential second router also assign addresses to devices in that globally routable space directly? Or would I need some sort of NAT? I’ve seen some modern routers with the capability of “pass-through” IPv6 address allocation, but I’m unsure if the firewall of the router would still work in such a configuration.

In IPv4 I used to have a similar setup, where router 1 would just forward all packets for some ports to router 2, which then would decide which device should receive them.

Has any of you experience with a similar setup? And if so, could you even recommend a router?

Many thanks!

Edit: I was able to achieve what I wanted by using OpenWrt and their IPv6 relay mode. Now my ISP router handles all IPv6 addresses directly, but I’m still able to filter the packets using the OpenWrt firewall. For IPv4 I didn’t figure out how to, at the same time, use the ISP’s DHCP server, so I just went with double NAT. Everything works like a charm. Thank you guys for pointing me in the right direction.

robber@lemmy.ml · 2 years

IIRC there is a plugin for Caddy that can do what you are looking for.

Edit: here you go

robber@lemmy.ml · 2 years

I migrated my home- and webservers from Debian to FCOS a while ago and I’m very happy with how everything works.

Troubleshooting butane/ignition was a bit of a pain in the butt but worth it imo. I suggest just reading through the FCOS docs, they guided me well while setting everything up. I use podman on my webservers and docker on the homeserver (bc nextcloud aio is not fully podman compatible). I use the installer to build a pre-configured ISO that I can deploy where I want to.

Someone in the comments mentioned Flatcar, which I think looks compelling as well, since it’s basically the same but more of a community effort.

robber@lemmy.ml · 2 years

Sounds like a rather frustrating journey for you.

robber@lemmy.ml · 2 years

Thanks! Glad to see the 8x7B performing not too bad - I assume that’s a Mistral model? Also, does the CPU significantly affect inference speed in such a setup, do you know?

robber@lemmy.ml · 2 years

So you access the models directly via terminal? Is that convenient? Also, do you get satisfying inference speed and quality with a 16GB card?

Any experience with Pangolin?

[Solved] Chaining routers and GUA IPv6 addresses