Oh yeah I was aware that it won’t change from 1080 to 720 :p.

But I thought the movie would just be corrupted an unplayable not lose quality bits !

start to lose quality

Wait… That’s a thing? You can lose video quality off a video file on a HD over time?

👆 Exactly ! We think as ourselves as an intelligent species when in reality we are nothing more then ants with some tech here and there.

Imagine having a pocket CERN version like we use to have a mobile today (which is kinda a mini computer). 60 years ago we would have never imagined this could be possible.

We will probably never evolve as a “super intelligence”, we are to busy killing each other !

Why would the US fear China will win race to Moon? US has already been there…

Or is that some kind of 60 years marathon challenge?

may indirectly bring positive consequences right here.

First time on planet Earth, huh?

Dunno if hamachi is still around but that’s what I used to play pirated games over lan !

Yeah :) Maybe give lychee a try :) it’s minimalist and does one thing, but it does it well !!!

Problem is a lot of people don’t understand how to read a doc. There’s a terminology, phraseology, syntax.

This reminds me of the ExifTool documentation… It feels like a well written documentation (and probably is) but the lack of context as a non programer can be overwhelming ://.

Thankfully, the forum was of great help and the maintainer is still active after all these years… Incredible tool by the way !!!

Oh nice tip, thank you ! It won’t be that much of a difference I guess, but why would you let a wifi module on if it’s never used !

Same here ! Although, sftpgo is a bit overkill if you only need it for webdav !

And let’s be fair to them, who’s even heard of lithium batteries catching fire?

Euhhhh… You sure about that? Maybe you’re beeing sarcastic? But buses lithium batteries catching fire is not something unheard off ! Even a few Teslas burned to the ground went viral in the news !

I still need to find a “$35 Raspberry Pi” 🤣

Haha, I feel that… My first bash script to loop over my files and use mkv or ffprobe to modify either metadata or encode my files were if statements for every file xD

It worked but was ugly as fuck, tedious and surely not efficient… I had to change each file name manually…

I keep those scripts as “things of the past” to remember myself where I come from :) I’m still chuckling seeing those horrible things, but they worked and I was happy that I did it all by my self :D.

This seems cool and is not off topic at all :) It does seem to answer to my “question” and seems a nice thing to have :) However, someone suggested Terraform but after some reading it’s not the tool I was looking for… Ansible seems more the like I guess ! But coolify seems also very interesting ! Different and more similar to my current setup.

I think Terraform, Ansible, Tofu are the next generation tool to solve my current issue… They are declarative tools ! But I don’t want to rush things and have another dead setup lying arround !

Thanks for your reply !

Edit: There’s also an alternative https://github.com/Dokploy/dokploy in case you didn’t know :) If you know, can you tell me why you choose on over the other?

This is indeed similar ! And looks like a working certificate :) (You even use as .csr file).

The book adds something (Not very useful but kinda neat to have): a certificate revocation setup and an IntermediateCA signed by your rootCA. So you can keep your rootCA out of your system :)

(Thanks to darkan15 for explaining that).

I have to look at his answer to have a better understanding :P

The diagram would be useful. Considering that rn I’m losing my mind between man pages.

I’m working on it right now :) I’m a bit overwhelmed with my own LAN setup, and trying to get some feedback from other users :P

As for the book… I can’t accept. Just give me the name/ISBN and I’ll provide myself. Still. Thanks for the offer.

Good. If you have the money to spare please pay for it otherwise you know the drill :) (Myself I’m not able to pay the author so it’s kinda hypocrite on my end… But doing some publicity is also some kind of help I guess?)

**Demystifying Cryptography with OpenSSL 3 . 0 by Alexei Khlebnikov **

ISBN: 978-1-80056-034-5

It’s very well written, even as a non-native it was easy to follow :). However, let me give you something along the road, something that will save you hours of looking around the web :) !

Part 5, Chapter 12: Running a mini-CA is the part you’re interested in and that’s the part I used to create my server certificates.

HOWEVER: When he generates the private keys, he uses the ED448 algorithm, which is not going to work for SSL certificates because not a single browser accepts them right now (same thing goes for Curve25519). Long story short, If you don’t want to depend on NIST curves (NSA) fall back to RSA in your homelab ! If you are interested in that story go to p123:

Brainpool curves are proposed by the Brainpool workgroup, a group of cryptographers that were dissatisfied with NIST curves because **NIST curves were not verifiably randomly generated, so they may have intentionally or accidentally weak security. **

Here is a working example for your certificates:

Book:

$ mkdir private
$ chmod 0700 private
$ openssl genpkey \
    -algorithm ED448 \
    -out private/root_keypair.pem

But should be:

$ mkdir private
$ chmod 0700 private
$ openssl genpkey \
    -algorithm RSA \
    -out private/root_keypair.pem

You have to use RSA or whatever curve you prefer but accepted by your browser for EVERY key you generate !

Other than that, it’s a great reading book :) And good study material for cryptography introduction !

Oh my… Love changed in a 8-year life span ! I guess nothing stays the same forever 🤷‍♂️

Sorry, what do you mean by physical/logical diagrams :S! You mean something like Excalidraw ?

I did It for sometimes, but If I do some changes in my setup I always have to keep that update too… So I have to think about it… I do like drawing those diagrams, but keeping those updated is sometimes not directly possible and I can get forgetful !

Thanks for the pointer :). I’m more into open source, so TrueNAS is maybe more fitting, however I’m not sure I do understand it right… Those are OSes? Not some application I can host in a container right? More like Proxmox ?

Sorry I didn’t respond earlier :S !

To let me access the services both from the desktop and the laptop. I’d need to have two DNS resolvers, since for the laptop it needs to resolve to the 192.168.0.* address of the homelab router. While for the desktop it needs to resolve directly to the 10.0.0.* address of the server.

I’m not entirely sure if I get what you mean here. If you have a central DNS resolver like pihole In your LAN it can resolve to whatever is there. I have a pihole which resolve to itself (can access it as pihole.home.lab) and resolves to my server’s reverse proxy, which handles all the port shenanigan and services hosted on my server. I think I can try to make a diagram to show how it works in my LAN right now, not sure if this can be helpful by any mean, but this would allow me to have a more visual feedback of my own LAN setup :P. However, I do use Traefik as my reverse proxy for my docker containers, so I won’t apply to nginx and I’m not sure if this is possible (It probably is, but nginx is a mystery for me xD)

Also, little question. If I do manage to set it up with subdomains. Will all the traffic still go through port 1403? Since the main reason I wanted to setup a proxy was to not turn the homelab’s router into Swiss cheese.

Your proxy should handle all the port things. Your proxy listens to all :80 :443 Incoming traffic and “routes” to the corresponding service and it’s ports.

While I do have my self-learned self-hosted knowledge, I’m not an IT guy, so I may be mistaken here and there. However, I can give you a diagram on How it works on my setup right now and also gift you a nice ebook to help you setup your mini-CA for your lan :)