overview for shiftymccool

I even turn off the "frequently used apps" features on android launchers. If I frequently use it, I've already put it in a prominent spot so I can access it easily. I don't need some frecency algorithm or ai to tell me I use something frequently, I already know!

Knowing exactly where something is every time is far better than that thing I'm looking for being buried because I want to use it during a time of day that I don't normally

What open-source applications do you use? in c/[email protected]

[–] shiftymccool 1 points 2 weeks ago

Try futo keyboard. You don't even have to download a proprietary blob to enable gesture typing.

You never swipe! in c/[email protected]

[–] shiftymccool 4 points 2 weeks ago (3 children)

Should that person never get another job ever again? "You said something bad so you and your family must starve!"

20

Docker network internet access (self.selfhosted)

submitted 5 months ago* (last edited 5 months ago) by shiftymccool to c/[email protected]

7 comments fedilink

Hey all! I'm having an issue that's probably simple but I can't seem to work it out.

For some history (just in case it matters): I have a simple server running docker and all services being defined in docker-compose files. Probably doesn't matter, but I've switched between a few management UIs (Portainer, Dokemon, currently Dockge). Initially, I set everything up in Portainer (including the main network) and migrated everything over to Dockge. I was using Traefik labels but was getting a bit annoying since I tend to tinker on a tablet. I wanted something a bit more UI-focused so I switched to NPM.

Now I'm going through all of my compose files and cleaning up a bunch of things like Traefik labels, homepage labels, etc... but I'm also trying to clean up my Docker network situation.

My containers are all on the same network, and I want to slice things up a little better, e.g. I have the Cloudflared container and want to be selective about what containers it has access to network-wise.

So, the meat of my issue is that my original network (call it old_main) seems to be the only one that can access the internet outbound. I added a new network called cloudflared and put just my Cloudflared container and another service on it and I get the 1033 ARGO Tunnel error when accessing the service and Cloudflare says the tunnel is down. Same thing for other containers I try to move from old_main, SearXNG can't connect, Audiobookshelf can't search for author info, etc... I can connect to these services but they can't reach anything on the web.

I have my docker daemon.json set to use my Pi-hole for DNS and I only see my services like audiobookshelf.old_main coming through. I also see the IP address of the old_main gateway coming into Pi-hole as docker-host. My goal is to add all of my services to new, more-specific networks then remove old_main but I don't want to drop the only network that seems to be able to communicate with the web until I have another that can.

I'm not sure what else to look for, any suggestions? Let me know if you need more info.

20

Traefik conditional certificate for same URL (self.selfhosted)

submitted 7 months ago* (last edited 7 months ago) by shiftymccool to c/[email protected]

16 comments fedilink

Hey all!

I have a bunch of services running on my home server and was looking to expose some of them publicly via Cloudflare tunnel. This is done and working great using the origin server certificate and strict TLS.

Up until now, I've been using self-signed certs internally but now I don't want to deal with the "proceed anyway" crap on browsers. I have Traefik set up to get certs from Cloudflare using DNS challenge and that seems to be working.

So, now my problem is: how do I switch between these certificates for the same URL when I'm internal vs public? I'd rather keep that traffic local if I'm at home, which is also working, I just can't figure out how to get Traefik to use the appropriate certificate depending on if the request is coming from my LAN or Cloudflare.

Any suggestions? Is there a better way to accomplish what I want to do?

EDIT: Looks like I'm just going full Cloudflare on this one, thanks for your help everyone!