Anyone to help with Pangolin public resource?

EDIT: It was a bad configuration on Pangolin, the problem has been solved, tks

I'm trying to expose my instance on my homelab through a tunnel to a Pangolin running on a VPS.

Some services work but Navidrome just won't work, I can't reach the server no mater what.

reddit.com
u/hbacelar8 — 2 days ago

Some resources won't work (no available server error)

I'm trying Pangolin for the first time. I have a homelab which consists of a mini PC with debian running multiple docker stacks. I got a Hetzner VPS with debian, pointed my domain to its IP and deployed Pangolin.

Everything seemed to be working fine, I installed a docker site on my homelab with newt (only Wireguard port is open on it since I also use wg-easy) and started adding some public resources to point to my internal server IP.

Some resources work fine like Immich, but other like Navidrome server and AudioBookShelf just won't work, I tried everything (limited to my knowledge) and can't get it to work. I keep getting a blank page with no available server for them. I have no geoblocking, I have crowdsec setup and I tried two things: pointing the resource target to IP:PORT of the service (HTTP) and pointing it to IP:443 with HTTPS, since my server also have a NginxProxyManager running doing the reverse proxy for internal services. No success.

Would someone have any idea how I could at least better debug to try and find the problem?

Tks

reddit.com
u/hbacelar8 — 2 days ago

Should I avoid hosting Pangolin at home instead of on a VPS?

I have a static IP and only expose the Wireguard port to connect to my Homelab. Every service has HTTPs since I use Nginx Proxy Manager with a domain pointing to the LAN IP of my server and certificates are resolved using my domain provider's API.

I wanted to expose some services like Navidrome, Immich for quick link sharing and ntfy for UnifiedPush, but I didn't want to add the cost of a VPS at the end of the month.

Is it really a bad idea to port forward ports 80 and 443 and handle everything at home with precautions like crowdsec?

reddit.com
u/hbacelar8 — 4 days ago

My experience on Graphene after 2 weeks

It's been almost 2 weeks that I've bought a Pixel 9A and migrated to GrapheneOS. That's something I was planning to do for a while since my privacy journey started.

Privacy for me has to be seen in a spectrum, it's not black and white, but a sum of actions in order to reduce dependency on proprietary solutions. It started when I moved to Artix Linux more than 3 years ago. Then I got a mini PC, installed Debian, got a NAS and started replacing proprietary software by well established and maintained FOSS solutions. I think selfhosting and starting with migrating to open source alternatives made the migration to GrapheneOS way much easier. As you can see on the attached images, my main profile is today fully open sourced, and those are the apps I have. In addition to those installed via Obtainium, I have IronFox and Molly from Accrscent store and Wireguard directly from their official APK. I use Wireguard for accessing my Homelab and for all configs generated for IVPN servers, to which I'm connected with kill switch all the time.

I recently made a post here asking about alternatives to Google Maps and CoMaps was recommended to me. A couple of days ago I went to a big city in Spain and decided to take the risk and go only with my Pixel phone, without taking my previous Android phone as a backup if needed. In a big city, CoMaps worked really well and I had zero problems with moving around and using the Metro lines.

For the profiles, I decided to go with an empty untouched Owner profile, a second main profile fully open source (the one for which the apps are shown and I use all the time) and a third one called Finances where I installed Play Services and Store, downloaded my bank app and then revoked internet access again for Play Services and Store. I configured this profile to not run on background, so I just quick switch to it if I ever have to make a bank transfer or approve an online purchase, which is rare.

That's it, to summarize I'm really happy with the move. I won't say I wish I'd done it sooner cause as explained I think the whole migration process from proprietary to FOSS alternatives eased up the process.

u/hbacelar8 — 5 days ago

Recommendations on domain providers reasonably cheap?

Honestly, I've never considered privacy when choosing my domain provider (Porkbun). Is it good privacy wise? Or you'd recommend something else? I've heard of 1984 and Njalla, but their prices are a bit high compared to Porkbun.

reddit.com
u/hbacelar8 — 5 days ago
▲ 4 r/IVPN

DNS IP incoherence between generated config and documentation

Hello

I manage all my connections through Wireguard client apps and as I was reading about the DNS servers on the knowledgebase, I noticed the generated configuration is incoherent with the DNS IPs shown on the docs.

On the DNS settings, if I choose Antitracker in Comprehensive mode

https://preview.redd.it/qbyivhmhhijh1.png?width=574&format=png&auto=webp&s=47d75211497b5e04946cfada724b9d7edc069940

I expected to see the 10.0.254.6 IP since I didn't select Hardcore mode.

https://preview.redd.it/0iwjw9yohijh1.png?width=776&format=png&auto=webp&s=59cb224ce76099f67072801e9bb79180af055ec1

However, this is the config generated for no matter which type of DNS I choose (it defaults to the Basic no Hardcore mode IP)

https://preview.redd.it/sekuo3xciijh1.png?width=539&format=png&auto=webp&s=b6cfb5ac564eb67538d6df1a9683908046cb63ae

Of course I can change it manually, just wanted to confirm if it's a bug on the generator.

Tks

reddit.com
u/hbacelar8 — 5 days ago

What does the HID support mean exactly?

I know it makes it act like a regular controller outside of Steam. But correct me if I'm wrong: customization of buttons/pads/sensors are all still dependent on Steam Input therefore on Steam client, right?

reddit.com
u/hbacelar8 — 6 days ago

Maybe dumb but: if IronFox doesn't have permission to location, I'm on WiFi with VPN and kill switch, how comme every search I do on DuckDuckGo about common places like national supermarket franchises give me result to the location on my city (a very small city BTW)

The title

reddit.com
u/hbacelar8 — 6 days ago
▲ 2 r/IVPN

How to generate a new server config for the same key pair?

I don't use the official client, not on my Linux desktop neither on my phone. I use wireguard-tools for the first and the Wireguard Android app for the latter.

I want to know how can I, after having generated a key pair config for a specific server, how can I generate a new config dor another country that uses the same device, so I can avoid creating a new device.

Tks.

reddit.com
u/hbacelar8 — 7 days ago

Does anyone here use Libretube?

It seems legit to me. It has some time of development, quite a number of collaborators. I've tested it before on my old phone and liked to concept of using YouTube without any account or sync with Google.

Still, wanted to know if anyone has experience with it.

Tks

reddit.com
u/hbacelar8 — 11 days ago

Youtube - Impossible to play this video on your browser

Edit 3: as suggested by u/Terrorwolf01, I fixed it by installing the ffmpeg4.4 package on Artix.

Seen for the first time ever on Youtube, been using LibreWolf for a long time. It's on a single livestream, all other videos are still working.

Anyone seen this recently?

Edit: I'm actually having the problem with all Youtube livestreams, just tested on others.

Edit 2: Ok now apparently GIFs and videos on reddit won't play as well. I updated my system (Artix) a couple hours ago, so there must be something related to that.

reddit.com
u/hbacelar8 — 12 days ago
▲ 13 r/gog

First time backing up / installing a game with patch. How should I proceed?

Not sure how to proceed when patches are available, first time backing up and installing a game like this. I'm on Linux, so I normally just run the .exe for installing the game and the other .exe in the same prefix for DLCs, but not sure about patches.

u/hbacelar8 — 12 days ago
▲ 1 r/IVPN

No Switzerland servers? Which country to bypass age verification?

Hey

I was willing to migrate to IVPN, got a month right now and installed the app. I noticed there's no servers on Switzerland, country that I tend to let my phone and PC connected to full time when using Mullvad.

Which country you use to avoid age verification?

reddit.com
u/hbacelar8 — 14 days ago

Is it possible to install GrapheneOS on a stock Pixel without logging into Google beforehand?

I'm getting a new pixel today and wanted to know if I have to first do all the Google login process in order to enable OEM unlocking in the settings.

I didn't want to login with Google on the device before flashing graphene if it's not necessary.

Tks

reddit.com
u/hbacelar8 — 14 days ago

FOSS replacements for Google Maps

Hello

I'm taking the plunge tomorrow when I get my hands on my Pixel 9A. I'm almost 100% degoogled but when traveling the thing I find the most useful is google maps since it integrates live map view with reviews (good for restaurants) and local public transportation information to get to places.

I'm looking for an alternative for those 3 things: map with live location, reviews and public transportation plan, not necessarily on a same app (I don't expect it to be anyway).

Just another question, does Uber work on GOS?

Tks

reddit.com
u/hbacelar8 — 15 days ago
▲ 70 r/privacy

Is it all really worth it?

As someone who cares about digital rights and privacy, I've been seing myself more and more stressed about every little fight we lost everyday just trying to keep our rights. The worst for me is realizing we're just a minority, as mass surveillance will still happen despite our fight since the majority of people (mass) doesn't give a shit about all of this.

I started to question it since having a conversation with a friend where I just wanted to explain to him why it'd be better if he'd install Signal to replace Wpp and keep talking to me. We have to convince people to do something that should be obvious, why wouldn't you prefer an open source and secure solution over a proprietary one owned by Meta?

But in the end those people just don't care about chat control and things like that cause in their head that's actually good, cause they felt for the *let's stop crime" fallacy. And to be honest, those people seem way less stressed and more happy just being *dumb*.

So I wonder, is it all really worth it?

reddit.com
u/hbacelar8 — 16 days ago

How to properly encrypt emails?

I use mailbox with custom domains and use Thunderbird on PC and FairEmail on Android.

I generated, exported and imported a gpg key on Thunderbird.

My question is: should I publish my public key to a PGP server? I know that'll expose my email, but what if it is a alias?

reddit.com
u/hbacelar8 — 18 days ago
▲ 72 r/IaCaca

L'analyse des images avec IA aux magasins

Plus récemment dans mon magasin local ils ont installés plusieurs caméras et ont mis une affiche indiquant l'adoption d'un système de traitement d'image pour éviter les vols d'une boîte française qui s'appelle Veesion. Avez-vous déjà vu ça aussi ?

Ils allèguent ne traiter que les gestes, ce que pour moi c'est du bullshit. J'ai essayé d'exercer mon droit d'opposition au traitement via le QR code mais le process est un peu chelou, vous le voyez dans les deux autres images. On nous demande le nom du magasin, on met Market *NomDeLaVille et c'est bon, aucune confirmation. Ont-ils tout simplement arrêté le traitement pour les prochaines 45 minutes ou que pour moi? Si c'est pour moi, comment savent-ils s'ils allèguent ne pas traiter le visage? Encore du bullshit pour moi.

J'ai scanné le QR code pour lire la politique de confidentialité et j'étais surpris, en plus d'avoir l'impression d'avoir été écrit par un enfant tellement c'est flou les vraies infos technique, il y a plein de truc chelou dans le texte, exemple:

>Au sein de le responsable de traitement, seul le personnel strictement habilité est amené à traiter vos Données. Nous sommes susceptibles de partager vos Données avec certains de nos sous-traitants titulaires d’un agrément CNAPS.

Quels sous-traitants ?

>Nous traitons et conservons vos Données en France. Nous sommes susceptibles de transférer vos Données vers des pays tiers. Dans ce cas, ces transferts sont encadrés par des garanties appropriées au sens de l’article 46 du RGPD, en particulier, par les nouvelles clauses contractuelles types de la Commission Européenne ((UE) 2021/914) qui vous seront communiquées sur demande.

Quels pays ?

>Vous disposez également d’un droit d’opposition vous permettant de vous opposer au traitement de vos Données pour des motifs légitimes.

Excusez-moi? Motifs légitimes? Qui jugent la nature du motif? Je ne veux pas serait pour moi déjà un motif légitime.

>En cas de question sur la Politique de Confidentialité et pour exercer vos droits, nous vous invitons à nous contacter à contact@veesion.io. La demande doit émaner de la personne concernée elle-même qui doit être en mesure de justifier son idiientité. Une copie de votre pièce d’identité pourra vous être demandée dans les limites de la Réglementation Applicable. Nous nous efforcerons de donner suite à votre demande dans les meilleurs délais et, en tout état de cause, dans les délais fixés par la Réglementation Applicable.

Attend, je dois fournir une pièce d'identité afin de m'identifier pour exercer mon droit? Mais je pensais qu'ils ne traitaient pas le visages...

Vous pouvez trouver la politique de confidentialité ici.

u/hbacelar8 — 18 days ago