DarkSirrush

I mean, I make fun of my home server all the time - its 2 old computers screwed to a wall.

cries in Canadian

Slskd is an app that is meant to be run in docker to integrate with your arr stack for music

In Barcelona?

Not everything is solely an american issue, even (especially) when it comes to US companies.

Note that the nsfw purge has been happening for several years now.

Picard is literally the only Jellyfin related tool I use that isn’t fully automated, because somehow the automated versions I could find were doing things like renaming files on a 60% confidence of the filename and I had to nuke and re download my library.

So instead I open Picard, click 6 whole buttons, and my entire library/new files are renamed, tagged, and sorted 100% accurately.

Slskd is something that you should never consider using

Upstanding member of society just means the fucker goes to church though.

Yeah, I pay an average of $0.12CAD/kWh here, $0.32USD/kWh is fucking robbery.

Best slinky cats.

The dark markings are considered a sable pattern.

He has been a war criminal for a few years now.

Its a domestic long hair - most cats don’t fall into a specific breed, and reddish black fur is far more common than bluish black fur.

The best you can generally do with cats is look up their colouring/marking patterns to see if that has a name, but it doesn’t really mean much breed-wise.

I recently posted most of my traefik configs, you can use it as a base to learn how traefik works:

https://lemmy.ca/comment/17702205

Note that I might not be much help with troubleshooting, as this took me a lot of trial and error and googling to make work.

I am definitely not the best at networking, but can’t you do that through your current dhcp client?

The server has been reverse engineered for literal decades at this point.

I can share my traefik setup - note I am doing this on my phone at work, so I might miss something

compose.yaml

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.middlewares=authwares@file"

  GNU nano 7.2                      /config/traefik/dynamic/middlewares.yaml
http:
  middlewares:

    limit:
      buffering:
        memRequestBodyBytes: 5000000000
        memResponseBodyBytes: 5000000000
        maxRequestBodyBytes: 5000000000
        maxResponseBodyBytes: 5000000000

    authwares:
      chain:
        middlewares:
          - default-headers
          - authelia
          - limit

    default-headers:
      headers:
        accessControlAllowHeaders: "content-type,authorization"
        accessControlAllowMethods:
          - GET
          - OPTIONS
          - PUT
          - POST
          - DELETE
        frameDeny: true
        accessControlAllowOriginList: "*"
        accessControlMaxAge: 100
        addVaryHeader: true
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        stsIncludeSubdomains: true
        stsPreload: true
        stsSeconds: 15552000
        customFrameOptionsValue: SAMEORIGIN
        referrerPolicy: "strict-origin-when-cross-origin"
        customRequestHeaders:
          X-Forwarded-Proto: https
        customResponseHeaders:
          X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex"
          server: ""
          X-Forwarded-Proto: "https,wss"
        hostsProxyHeaders:
          - "X-Forwarded-Host"

    authelia:
      forwardAuth:
        address: http://auth/api/verify?rd=https%3A%2F%2Fauth.example.com%2F
        trustForwardHeader: true
        authResponseHeaders:
          - "Remote-User"
          - "Remote-Groups"
          - "Remote-Email"
          - "Remote-Name"

  GNU nano 7.2                            /config/traefik/traefik.yaml
global:
  checkNewVersion: false
  sendAnonymousUsage: false

entryPoints:
  web:
    address: :80
    proxyProtocol:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    forwardedHeaders:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: true
  websecure:
    address: :443
    proxyProtocol:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    forwardedHeaders:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    http:
      tls:
        options: modern@file
        certResolver: letsencrypt
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  providers:
  docker:
    exposedByDefault: false
    network: compose_proxied
    allowEmptyServices: true
    endpoint: "http://socket:2375/"
    defaultRule: "Host(`{{ index .Labels \"com.docker.compose.service\"}}.example.com`)"
  file:
    directory: /config/dynamic
    watch: true

api:
  insecure: false
  dashboard: true

certificatesResolvers:
  letsencrypt:
    acme:
      email: [email protected]
      storage: /certificates/acme.json
      dnsChallenge:
        provider: cloudflare
        resolvers:
          - "1.1.1.1:53"
          - "1.0.0.1:53"

log:
  level: DEBUG
  filePath: /config/logs/traefik.log
  format: json
accesslog:
  filepath: /config/logs/access.log
  bufferingSize: 100
  format: json

Guess I am making this in excel now.

Note that its also possible to set up service auto discovery with traefik, the only traefik related config I do on new containers is

Traefik.enabled=true

I did this twice in both big toes, as the first time they only did the sides.

Now I gross out coworkers and fascinate small children when I wear sandals, and haven’t had big toenails in close to 20 years.