I virtualized my OPNsense years ago via Proxmox and put it on HA. I’ve had it failover to another node that blinked out for some reason, and not noticed it for weeks. I’m a complete believer in virtualizing it. I used 2 nics per node and the external NIC is on a switch across all nodes. YOu could use VLANs instead.
Not to mention the snapshots before updates, and restoring via PBS (which I’ve had to do and takes a few minutes). I would never go back to bare metal.
I like Fully_Kiosk on android, but it’s paid.
Eh, I just saw you weren’t meaning a tablet. That’s what most people kiosk on.
The number of kiosks that are stll Windows NT would make you shudder.
I thought it was pretty weird, so I tried again a while later; same result. I checked through issues and couldn’t see anything, I figured it was just me. I tried because NPM was just full of error logs and was having some sort of shitfit, so I blew it out and rebuilt from scratch, now all is fine. But the NPM+ defeated me. I might have to try again just because.
NPM+ didn’t work worth a damn for me. No proxies would forward, I have no clue why and couldn’t figure it out. It was like I was turning knobs that weren’t connected to anything. But YMMV.
Long ago I learned to stop convincing people to stop shooting themselves in the foot.
It needs to be running on postgres and redis. The AIO is your best bet
Just the 5-6 raid modes are shit. And its weird willingness to let you boot a failed raid without letting you know a drive is borked.
In the docker-compose.yml for the AIO, you can specify the port that the Apache server runs on with APACHE_PORT=XXXX
Then you set your reverse proxy to proxy to that port. If you need some pointers about how to use a reverse proxy, ask away.
What’s your general self-hosting setup and what machines are you building for that? I’d like to have HA Proxmox running all the time on three nodes with a low power bill and lots of memory available (like 256GB) but space for memory seems to be difficult to find in a reasonable priced consumer board.
Good to know, thanks for the PSA.
OpenWebUI is pretty much exactly what you’re looking for. It can start up an ollama instance that you can use for your other applications over the network, and chat with it as you see fit. If you have an API key from an outside subscription like OpenRouter or Anthropic, you can enter it and use the models avaialable there if the local ones you’ve downloaded aren’t up to the task.
That I could accept as a good reason.
My threat model isn’t having someone take my computer and log into stuff so my concern when using 2FA is more about them having gotten hold of a password remotely. But a TOTP makes that password pretty hard to use, no matter where it’s stored. And my BW is also protected by a Yubi/password combo, so I guess I’m just vulnerable to having that beaten out of me.
Right under Password in the edit screen of an item: Authenticator Key. You put in the auth key the target site provides you when you enable TOTP and it will start generating timed tokens. Usually you’ll also get a one-time pad of backup keys, I usually toss those in the Notes of the edit screen there as well in case something goes wrong.
Yah, I can’t see a point to have another app/extension when Bitwarden has it built in, and it’s a great password manager.
userns-remap I remember seeing another method that was more manual that would have worked for Podman, but I can’t seem to find it now.
I’ve seen this done with namespaces as well. Which should work for podman.
Plus the FF extension is really full-featured. I can clip in different formats or even take a screenshot if the webpage makes clipping hard.
The files and folders of NC are outside of the database. They are fully browseable in the filesystem. The database is just there for the metadata.