It’s been a while, let’s go! Any major fuckups lately or smooth sailing?
I had to change the local DNS setup yesterday. I finally installed my wife Linux Mint and wanted to set her up for Vaultwarden real quick which became an hour long debug session since apparently CNAME entries for hostnames don’t work as I thought. Never came up the recent year as all my machines took it, but resolved refused to and so I eventually deleted the entries in the Pihole and created them as A records pointing to the VM with the reverse proxy, hoping I won’t need to change the IP anytime soon. It’s always DNS!
In other news I think I moved all my local dockered services to forgejo+komodo now and applying updates by merging renovate MRs still feels super smooth. I just updated my calibre web automated with a single click. Only exception is home assistant where I have yet to find a good split in what to throw in a docker volume and what to check in git and bindmount.
I finally figured out it was a bad stick of RAM in my server that has been causing random freezes and not some stupid mistake on my part. Thankfully it’s DDR3 so I can keep both of my kidneys and still afford the replacement.
Thankfully it’s DDR3
It’s one of the benefits of having older equipment. I use these guys for RAM purchases: https://www.memorystock.com/
Got hit with this recently
https://github.com/jellyfin/jellyfin/issues/15148
Just restored an old backup. Everything is behind a vpn and is working so ill give it a while and see if it gets sorted before resorting to swapping out the sqlite version for each update.
Ouchy!
Someohow rewiring my drives and removing two cables have stopped all zfs errors and it’s running 200% quieter.
Currently dealing with extraordinarily slow network interface speeds on my NAS. Did a quick IO test with dd, and the results were great. I’d troubleshot this before to no avail, let the device power cycle and network speeds were fine afterwards. No dice this time, so I’m just replacing most of the hardware aside from the drive pool since I’d planned to anyways. Will troubleshoot my router’s network card as well for sanity’s sake.
Some of the things in my house were set up so long ago, and running so smoothly, i havent looked at them in years (other than auto updates) now i’m afraid i’ve accidentally left some security hole without realizing it
For example, i set up cerbot 10 years ago and back then there was no DNS challenge, so i had to open my webserver to port 80 to renew… well since everything was running from https/443, i decided to block port 80
so i edited the systemctl unit for certbot to temporarily open port 80 for the renewal, and close it right after…
It was only 5 years later i realized i made a mistake and port 80 had been open for 5 years to the open internet
Probably no harm since its a public server anyway… defense in depth is the key
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
Fewer Letters More Letters DHCP Dynamic Host Configuration Protocol, automates assignment of IPs when connecting to a network DNS Domain Name Service/System HTTP Hypertext Transfer Protocol, the Web IP Internet Protocol nginx Popular HTTP server
[Thread #51 for this comm, first seen 1st Feb 2026, 10:01] [FAQ] [Full list] [Contact] [Source code]
It’s been fairly smooth lately, knock on wood!
My Valheim server that is set up for friends and family had some issues, but nothing in the logs so I assume it was a weird network issue that solved itself.
I also battled some problems with the Jellyfin temp/transcode folder ballooning in size, causing the whole server to crash as I hadn’t dedicated enough space to the container. Considered making a script to clear the folder at even intervals, but it would cock up streaming if the missus was watching while the purge happened.
Ended up just giving it 100 GB and let the daily clear be enough.
It ended up being the missus’ tablet suddenly requesting transcode of everything but H264, so I’m quietly hinting that she is due an upgrade anyways…Next project planned: Caddy (I’ve been saying that for 6 months…)
Isnt there a schedules task to clean the transcode dir?
If I remember correctly that it exists, might be worth to increase the frequency instedYou are right, there is a checkbox, but no way to adjust the interval AFAIK.
It seems to be a daily occurrence, which is fine when I just adjusted the container size.I’m going to be more weary of buying devices without H265/AV1 in the future, which is what I grab mostly. That should remove the need for transcoding completely anyways.
Have you tried clicking on the task?
Just checked my server and I could adjust the frequency as I please

I obviously need to have another look when I get home!
The issue started on 10.10, but I haven’t looked into it after upgrading.Thanks for taking the time, Freund!
My pleasure :)
Seems to be missing in 10.11.3, so I might just be a few patches behind.
I’ll read the patch notes and see if it’s been added recently.Just posting as it’s good to know for others searching, I guess.

Dunno where you are looking at. But you need to look in the scheduled tasks (left menu almost the last option.
There are several maintenance tasks of which one is the one you might be looking for.
Recently obtained a free circa-2017 mac mini which I installed Linux on, to create a docker hosting environment. Current have Jellyfin, SearXNG, and Forgejo.
My much older NAS serves as the NFS drive for the Jellyfin media (formerly, I ran Plex directly on the NAS, but this was slow/unreliable as the NAS has only dual 1Ghz ARM cores).
One of the drives in the NAS died Thursday night, but no serious issue as its RAID 1. I wonder if the new load on it pushed it over the edge. (Also, I wonder if I could use the mac minis SSD as a sort of cache in front of the NAS, to reduce wear on it, if that would even help…)
Luckily I had some gift cards from recycling old tablets and phones, so I could get a replacement drive at minimal cost. I went with a cheap WD Blue drive instead of the 2.5x more expensive Seagate IronWolf drives I had used in the past. We will see how that fares over the next few years.
Upon replacing the drive yesterday, I found the one that failed was a 2017 mfg date, so its life was 8 years (from when I initially populated the NAS). The other drive was replaced in 2021 (but it actually failed in 2020, I just left the NAS unused for a year at that time, so it had a life of 3 years). Some insight into the life span of the Iron Wolf drives.
Things I’d like to add soon:
- kiwix instance
- normalize my ebook/magazine collection
- setup to download my youtube subscriptions to Jellyfin’s media directory so I can avoid the youtube app/website
- something for music to ditch that subscription
I’ve been hinking about infrastructure as code tools. Skimmed the very surface of opentofu, looked at the list of alternatives.
I’m in need of something that is both, deployment automation and (implicit) documentation of the thing that I call “the zoo”. Namely:
- network definition
- machine definitions (VMs, containers) and their configuration
- inventory: keeping track of third party resources
Now I think about which tool would be the right one for the job while I’m still not 100% sure what the job is. I don’t like added complexity, it is quite possible this could become a dead end for me, if I spend more time wrangling the tool than I gain in the end.
PS: If you haven’t already, please take a look at your openssl packages. Since this week there are two new CVEs rated as high: https://openssl-library.org/news/vulnerabilities/index.html
I got zfs-zed working again after hours spent on vanishing notifications that worked before a kernel update that replaced a config file.
Turns out I missed a $ in a bash function call.
Finally killed my Discord account and moved my monitoring notifications to a self-hosted nyfy server. Works well.
One of my hard drives started randomly disconnecting.
I tried all the cables, but got nothing. I don’t have time to fix it before leaving for work, so I’ve set up a rightly reset and I’ll hope for the best. Angry family texts incoming!
So much has been going on
I moved recently and had to change ISPs. I went from 2 Gbps symmetrical fiber to 90/3 Mbps satellite behind CGNAT.
Fastest place to get the WAN cable into the house was through the attic and into my guest room / office. But that caused some serious heat and noise issues.
Ran some structural Cat6, installed new electrical outlet, put in some keystone jacks, wired a new patch panel, then moved the rack to the basement.
Bought and installed a UPS which has already saved me twice in a month.
Up speeds were too slow and the high latency to the satellite constellation was causing issues, so I spun up a small VPS. But that means I have to sync content back to my local.
I’ve been wrestling with
rsyncfor over a month… fiddling with flags to get the best results. I think I finally settled on a config yesterday and the service and timer are working wellCGNAT is messing with remote access, so I set up cloudflare tunnels. But the tunneling is not well suited for streaming. I was only getting ~100 Kbps on remote connections. Ran some
iperf3testing over tailscale and was slightly better.My preferred audiobook app
Prologuereleased a major update to v4.0 which broke Plex libraries on launch, so I had to quickly pivot toAudioBookShelf.To achieve remote streaming and access for Prologue, I had to explain Tailscale set up and create new user accounts. Only halfway through my user base. Not looking forward to explaining it to my parents
Finally, I’m trying to set up
Claudeto run on my server rather than my locked down enterprise laptop. That’ll allow more tooling access like git rather than before when I was spending a lot of time downloading and uploading files manually. I need to figure out how to keep my session open. I’ll probably runtmuxinside a docker container then runclaudeinside the tmux window. Hopefully that worksAs someone chronically behind CGNAT, you have my condolences
Oh, I also want to look into using a tailscale exit node to use a proton vpn wire guard route so I don’t have to switch between two separate VPNs
I also want to look into the exit node stuff.
2 problems this week
Accidentally had 2 Jellyfin pods trying to write to SQLite together and corrupted the DB. Not really anyway to fix it so just killed it and rebuilt the library.
Also, my son’s Minecraft server got corrupted. Longhorn backup to the rescue 🛟
Wait I don’t understand how changing your CNAME to A records resolved your problem. Did your wife’s computer simply not resolve the CNAME records?
So I have my vms behind an opnsense with DHCP, the opnsense also creates local DNS records like vm1.opnsense. The pihole has conditional forwarding for .opnsense to the firewall, so I can resolve the domain everywhere in LAN.
I had CNAME records in the pihole for my actual domain (e.g. lemmy.nocturnal.garden) pointing to vm1.opnsense so I take a shortcut from inside the LAN, avoiding going “outside” via the public IP.
Mint/resolved resolves the .opnsense domains when I directly look them up, but for a reason I didn’t fully understand, it does not work with a CNAME entry pointing to that. So I have up on the CNAME approach and created A records for each service, directly pointing to the VM’s IP.
I’m curious as why you decided to setup pihole when you already have opnsense. More so that your records are in pihole and not opnsense
I’ve had pihole years before the opnsense, but also opnsense is not the main router but just sits in front of my homelab. The wifi etc is a FritzBox, which also acts as WAN for opnsense.
That way, everything still in the house still works if my homelab/opnsense is down. Pihole is on a pi in the FritzBox LAN.
That sounds overly complicated, why not have it all on opnsense instead of 3 different devices?
Is your opnsense unstable? Otherwise regarding network availability you are just introducing unnecessary failure points the network.
The point of the opnsense is that I can tinker with it without risking our home wifi. It needs to stay up for my wife, for our mqtt devices/home assistant etc.
I don’t introduce points of failure to our home network which is the critical part. If something in the opnsense misbehaves, it only impacts my lab stuff. The FritzBox + Pihole combination has proven pretty stable over years, even though I’m considering getting a second Pihole device for high availability.
Ah right, I thought you were doing it like this
Internet -> Fritzbox + Pihole -> Opnsense -> Home Network
It makes sense now :D
Yeah that would be a bit convoluted :D






