#the-water-cooler
1 messages Β· Page 377 of 1
but now you also need to learn and set up SSL
err TLS
zerotier one is the simple way for people who dont know what they are doing
Actually I have Asus, Synology, duckdns all running so ddns is solved working every minute since first setup(homeassistant on wan)
Is there any useful things to do after succesful install? Do you guys have any regular activities after a fresh install?
Update all packages
Generate a public/private key pair. Disable password authentication on SSH
disable root login if that is enabled
Thanks Michael and Tinkerer. How could i do these?
ask google
Here , try this:
http://lmgtfy.com/?q=generate+ssh+key
Here , try this:
http://lmgtfy.com/?q=sshd_config
Sorry for all this question
It's how you learn, but there's a world of good resources out there
thats literally how I learned how to lock down my stuff. I jsut googled
Never be afraid to burn time Googling for stuff, or reading docs
how to secure my linux server
@brisk glen so the only explanation for not connecting on network2 to my broker on network1, is some temporary router failure like being offline or frozen etc.. but in theory, I have to be able to connect to my broker on any (virgin) network if I can connect via mobile data. Right?
my job title is just a fancy word for a professional googler
So, "tech" then π
I often tell people that the reason I appear to know so much is because I know how to ask Google questions
ISPs likes to block ports
90% of my knowlage comes from google, 5% of it from humble bundle books and 5% from work
Okay, thanks guys.π π
zerotier one will bypass most firewalls
and do a vpn ptp connection
I cant recommend it enough for IoT devices
that's not a question you can just casually ask
wars have been fought over less important opinions
I'm a fan of ed personally
emacs and teco
I'm old school... like it was 1979
emacs vs vi - entire galaxies have gone to war over less
i liked the april fools emacs built inside of emacs gag.
I was forced to learn VI...
so there is em and vi and emacs and nano aaaand ed π
vi, vim, nano, emacs, ed, and well cat π
i think i put these in a random generator π
so the two major is vim or emacs right?
is there one you suggest guys?
Learning it is not a problem
it will be hard i suppose
but I wish to learn
emacs is for masochists...
I tend to use nano
hmm
then i think vi it is
or vim
u guys all went to get torches and spikes right? π
painting your favourite_editor armour
Vsc for desktop, vim for basic ssh config editing
Although I really just use vim in basic insert mode. I won't get a payback in learning the archaic 'shortcuts'.
Especially since sshing into servers is happening less and less and less
Plus vim keys are based off a keyboard style that doesn't exist anymore
I just hate nano :D
@hushed basalt vsc can ssh into servers and have a prompt there for you, plus edit files
it really is starting to turn into something really nice
I'll have to give it a go
those things are beta plugins hower for now
I try to move away from ssh as a general best practice though
I Generally try to use infrastructure as code
Ansible uses SSH π
Yes but I don't use it ;)
Plus my homeassistant cicd doesn't use ssh
There's a difference between a playbook systematically run against 10 nodes and sshing into a server and changing config files
well ya
Plus I'm learning more serverless stuff for production use as well
So things like lamdba, api gateway, with managed services
Can't ssh into a lamdba worker ;)
heh, I dockerize everything now
everything is just a service now, I don't care about what is underneath it
@hushed basalt I use Terraform extensively at work, it's brilliant for managing AWS etc. For the various servers, both hosted and at home, plus the army of Pis I have around the place, Ansible is still king π
Meh, serverless is shared hosting with a fancy name and better API π
Nooo
Serverless is letting the provider worry about the underlying OS, patching, scaling, availability etc
I was doing serverless before it was cool, with bloody LXC of all things.
Did you eat gravel for breakfast too
Walked to school and back 5 miles uphill both ways, through the drudging snow under the beating sun
:D
π
I'm going to have a bash at hashicorps stack when I get my nodes next week though
Vault looks cool
I will admit, Lambda is damn handy, saves bringing up a VM for simple stuff, but at it's core, it's still just shared hosting!
Oh, Vault is absolutely amazing. We're using it for everything from SSHCA to MTLS to simple key/value store for secrets.
I'll be putting my cluster to good work
My 8gb 1.5ghz atom QC synology nas is a bit overwhelmed
The 4 x WD Reds in raid6 as my hyperconverged storage doesn't help either
It will be nice to have volumes on SSD :D
ugh I'm going to through these damn wyze cameras into a volcano
i received some good recommendations for poe cameras, but if I wanted something slightly better and more reliable than wyze, does anyone have a good wifi camera recommendation?
wyze is great if you stay in-app. I'd definitely give them to friends and family if they want a simple camera
Long live $20 IP cameras from wish and AliExpress
but the instant you want to tie it into HA? no way
is wish legit? i see the ads and just assume it's all bullshit
I have ordered like 300+ items there,
Never had issues with anything, it's like any China shop
Use your head, and you will be alright
I just go for whatever had a lot of orders and suits my needs
I've ordered 4 cams twice, first ones were hocam or something, worked like a charm for 3 years, until I hosed two of them with a hose, then got four with another name on them
omg the scrolling bg on wish's website is making me nauseous
Wish... lol. Just buy direct from aliexpress or alibaba at least you dont run the risk of it being broken by them being the middle man
but I'm at my pc π
Smarter Shopping, Better Living! Aliexpress.com
I run Poe cameras, power and image in one cable and don't have to worry about coverage π
Thinking about replacing them with dome ptz ones though 
nice
i dont have an attic so if I got poe the cable would be run outside under the roof, it wont be terrible to look at but certainly not pretty
@modest sentinel i bought two amcrest poe wifi cameras
I got the 3megapixel ones with 5ghz wireless
But get the 4mp if you want wider fov
No POE but obviously it's for wifi
Runs of 5v usb
I use them as baby monitors but they're fine. I don't think they're outdoor rated though
The zoom is digital too as well
But if I owned my own house I would just POE. Better in the long run, and cheaper. Run the cable in conduit or paint it if you have to
Aah, just got out of the pool from 24 laps and some sauna
so right now I installed ssh and created ssh keys
man ssh π
and now I am stuck
What's the actual question?
i think i need to copy ssh key to my computer
however it asks for remote_username password which is not the same i use on my system but then no clue what is it π
Regular Linux SSH or are you trying to configure the #330990055533576204 add-on?
no, just regular ssh
Here , try this:
http://lmgtfy.com/?q=how+to+set+up+ssh+keys
Leads you to https://www.cyberciti.biz/faq/how-to-set-up-ssh-keys-on-linux-unix/ amongst others
yeah
using this guide
i just generated ssh keys
Are u using Windows?
and now I am at this part
Copy the Public Key to the Server
so I think i need to open it from windows pc now
Are you using OpenSSH to generate the keys, or PuTTY?
so i downloaded putty
And... PuTTY's default keys aren't OpenSSH compatible
i generated keys from the server
PuTTY sucks π
oh I see
I have dropped everything called putty after powershell got SSH π
okay so I tell you what i've done right now
i installed ssh ( or rather checked if it is installed properly)
created ssh keys ON my debian
and that is it
is this okay until this part?
i used ssh-keygen -t rsa -b 4096 -C "your_email@domain.com"
to create ssh keys
The -C part is a comment FYI
and I did not entered any passphrase when it is asked
@clever mortar oh I see
so what is the next step?
should I get puttygen and mobaxterm then or what?
Puttygen and mobaxterm are much easier. You need MobaXTerm ANYWAY to connect via SSH
Since it is the best SSH and all-in-one client
Puttygen just makes generating key and deploying work of a minute
4096 bit, press generate, save the private key, copy the public key to /home/user.ssh/authorized_keys and DONE
If you generated the keys on the remote host, you need to copy the private key to your PC
I see. So should I delete those?
Though, keys without passphrases must be handled with care
Anybody with that secret key has access to your host
cause I am in a bit of conflict with Anon's guide and the original method I followed
I mean in the case : "where to catch up" or whether if I should delete or even can I delete the ones I've created
Both ways work, the puttygen way may just be easier for you because it is windows GUI related
And also it is quicker since you don't need to type a command
Something like https://www.howtoforge.com/how-to-configure-ssh-keys-authentication-with-putty-and-linux-server-in-5-quick-steps
How To Configure SSH Keys Authentication With PuTTY And Linux Server In 5 Quick Steps
This tutorial explains how you can replace password-based S...
IMO rather than PuTTY, look at XShell, or the one built in to Windows https://www.howtogeek.com/336775/how-to-enable-and-use-windows-10s-built-in-ssh-commands/
thank you for these options
first of all which method is proper for deleting the previously created keys?
"rm file"
thanks
and I assume the passphrase is like a password so I should enter something like it
you suggest using this then?
Yes, it's like a password - but can be longer, much longer
Mmmmmmm longer, faster, harder SCOOTER
Honestly I don't use passphrases but that's due I know what I do
I have many keys without passphrases, but those are for automated activity and well secured
Wish me luck, I'm going to troubleshoot performance "issues" through three levels of abstraction, but first, let's see what the customer actually expects 
upon using those lines
Customer expects a wonder
@past idol those lines?
My first rule is, never trust the customer, second is never think you know what the customer wants and third is make them believe they wanted what you did π
cd ~/.ssh
rm id_rsa*
I think the second should be never think the customer knows what they want, and 2.5 should be never think the customer knows what they need π
Here we usually need to understand what the customer actually wants, then we decide the best way and send them the bill and then it's too expensive and they don't want it
That's two lines @past idol
Like one wanted to have apache realtime logs, easily 1000 a month and then well rather not
Germans π
Yeah I know
π
Ok, so which line gives you that "error"?
cd ~/ .ssh
The learn-effect would be much better when just googling "How to delete a file in linux", because EVERYTHING is a file
ANd on the other hand "The 100 most used linux admin commands"
Getting familiar with it...
@past idol WTF
Really, just WTF
You could even have copy and pasted the command to avoid messing that up π
~/ .ssh π
You even copy and pasted it into the channel
I said:
cd ~/.ssh
you used
cd ~/ .ssh
Please play spot the difference π
Honestly if we gonna support at every step we would have to do for months
Harsh, but not wrong
I still recommend reading, just reading that all just like a year or so upfront
A year is overkill, but there are a lot of good guides out there, and Google (or another decent search engine) is your friend
Oh my
Not wanna be harsh or so, but this is really not low-end support for the most basic command which if not known Linux should not be touched
I would offer that as a course tho but 8k is not easily afforded for private usage
@past idol Honestly, install a couple of Debian/Ubuntu/whatever VMs and spend a few weeks messing about
Here , try this:
http://lmgtfy.com/?q=introduction+to+linux+admin
There's some good links there
But ls -al is the most common (and correct) ls
When using bigger files ls -alh is handy tho
Okay thanks
And also for your patients
I feel the gaps - or rather black holes - in my basic knowledge as soon as i can
So know that I deleted them
You could do the LPIC 1&2 certificates tho
I'm a tool and mostly resort to ls -ll and ls -ll -h π
Gotta look for those big files 
And I suck at byte conversion in my head
How often do you all get distracted at work,
All day
Yeah always, if a dev comes in and needs help then I gotta help
Just like a min ago
But then, that's kind of my role - I'm the senior/experienced person
I spend most of my time helping others - in one way or another - unless I'm working from home when I get my own stuff done
Depends on your career path/goal
IMO though, helping the team is what makes you be/become a team lead/management
I find I can get more done in 3 hours of absolute isolation, than a fulk day of constant interruptions
I think it's different if your role is a leader/manager
Like a CEO, their value is being on call to make high level decisions constantly, not so much thinking for 3 hours
But ask me to deploy a new framework and expect me to answer IMs every 5 minutes, nope
Depends on your job though - my ultimate boss (board level) still does "real work"
In our small company everyone can come up to anyone all day for help. And then it just depends on how important your stuff is then u gotta wait 10 min
You should read Deep Work by Cal Newport
In one chapter he goes into how it's 'easy' to be an interrupter
The basic premise is, if you ask someone else a question, you're putting the ball in their court, especially open ended questions to lots of people
And it's 'harder' to think about what you need to do, and consolidate your requests into appropriate times
I'm not quite explaining it well,
No, I know what you mean
I refer to it as "spin up" and "cool down" time - any time you get interrupted you go into "cool down" on the previous thing, then you have to "spin" it up again
I would pull up the chapter but I have it on audible
So that thirty seconds interruption may kill an additional half hour
Or an hour, or...
That's definitely a thing he talks about
But from the perspective of an interrupter,
It makes them seem 'busy' if they're always engaging with other people
I'd definitely read Cal Newports stuff though
Super useful
He also speaks about the hub and spoke system
I never get bothered really, since I work alone and I ignore calls if I'm focused π
So the ideal building design is not an open plan, but hub and spoke
So pods/rooms of individual isolated offices for deep work
And then long hallways and common areas for people to come out for interaction, lunch, meetings, etc. For the spontaneous stuff
@clear ferry thats what all people should be able to do. Especially people who'd productively relies on complex thought
But hey, it's an industry where places like Google and Facebook hire $200k/year devs and then distract them constantly with open offices
Since my company offers free massages while working time (so paid) I gonna have my very important meeting now
I hardly ever go into the office, because everyone distracts me
It's a pita when I go in, I can't get anything done really π
Proof in point
@hushed basalt https://github.com/ghuntley/serverless-to-cgi-bin π
Lol
Next you're going to tell me short sides and slicked back hair styles were around before now too
by the way it is still asking for password
I mean the remote access
when I want to copy the public key to my device
yet,i do not remember specifying any password for ssh
Ugh well unless there is a key you only have password access
And you need to have a password since the Debian installer asks you to set the root password AND to add a user WITH password as well
hmm
then I wonder why it gives an error
as I tried that password
I mean every other part is working with that password flawlessly
but thanks I will check it again when I get home, as it should work
Just don't get used to login via root... that is a no-go anyway. Debian's default is as follows: https://ubuntuforums.org/showthread.php?t=2359172
That means you actually can't login via password with root. So you would need to use the user and if you lost the password you can straight go ahead and install again π
So im using my Rpi 3b+ for my zwave network, so Iβm looking to buy another pi for my RetroPie. Would you buy a Rpi 3b+ or Rpi 4?
For RetroPie, Pi4 everytime.
Have a monster joystick with Pi3 in it which I updated to Pi4, and the difference is noticable.
How is the Pi4?
Never heard you would buy an older technical goody for almost the same price than a new much stronger one on purpose
Bigger Number=Better
hugs my Nvidia 7950GT
You kids with your 1080s. This'll knock your socks off
Yeah my RTX2080 is shit against that too
Flexes in 8800GT
Oh man
bigg
Anyone with a 9800?
Gosh I remember a way old graphics card I had
a TNT2
Halo would run
but no character models would show
Man thats only a 2
-snorts- "I run my HA in terminal only mode. A front end love lace just eats up ram and CPU"
I use arch btw
i have a 9600 gt back at home π
ah yeah what sort of games can it play mate
Advanced routing 2019
All the cool kids love it
And MAC blocker 3
Probably also runs VLAN Hunter 4 : Hunt for the 4096
But can it run Crysis or just cause a crysis?
Hello all
Atleast the latter when I do something wrong @boreal pewter
But a rpi 3b+ still runs nes/snes fine. If the pi 4 is hot etc is it worth it?
Read what I said
It is double the price? Didnβt get your point
Compare the price. Tell us what you pay for a3b and for a 4. I guess the price difference will be much less than the power difference
So value price / performance
Pi4: 700NOK+ special power adapter. 3+: 330NOK
Mh well, the only thing to mention then is the RAM
But that you would need to check for your usecase
Is ram important for retro gaming?
Well.. this is Home Assistant, the amount of Pi's is not -that- huge, or at least probably is barely anyone running both things
Why wouldn't you use your PC which most likely will have no performance issues?
hello everyone
U AGAIN

Which key type π
I do. But I hear elliptic curve is the new hotness
Also, man ssh-keygen π
That likely answers quite a few of your questions, including key size
ed25519 is I believe the current "best" type
PITA when Microsoft first put native ssh into beta though. They ONLY supported ed25519
That's pretty sweet actually, given the issues with dsa and rsa
I'll not argue. It's only habit and muscle memory that keeps me generating 4096 rsa keys
It's also the default type on most software
It's supported by OpenSSH, you'll have to check the client you're using whether it's supported there
(pretty much any server will use OpenSSH)
any muse fans in here
Add-on questions are off topic here π
nooooooooooo
Those go in #330990055533576204 or, for his add-ons, there's also his own Discord server
i was so good too
Nearly
sorry haha, off topic in this channel. i'll post elsewhere
the only channel i'm in all the time and i did a bad thing
i should know better, pls forgive tinkerer
Yeah ed25519 would be considered standard, just not yet in the tools
But only noobs generate 2048 bit RSA
What about my SHA1 keys ?!?!?!?
The 80's called for you
I still have the opinion that @clear ferry went to school with Bill Gates
thats actually what i picture ... LOL
I'm considering replacing some of my in-wall light switches (some one-way, some three-way) with smart varieties. I currently have some smart devices already - Ikea Tradfre bulbs (with hub,) and Leviton and SmartLife Wi-Fi outlets (no hub required.) Looking for recommendations for light switches that wouldn't require new hubs.
And I'm looking for new wheels
I have some hotwheels
They gonna be hot too... when I drive
Right, the fastest way to get homeless is rental car which cost a month more than my home and probably almost more than I earn
And a link again π€¦
Let me tell you about rental car prices @boreal pewter
Germany has nothing on Norway
An Audi A3 will cost you 170β¬ per day 
Last time I was in the UK I paid β¬80 for three days
lol well not that expensive here for that class tho, but depending on that I maybe end up at 100 per day
@clear ferry oof
Checked this summer for me and the wife to rent a car for 2 weeks, A4 size, pick up in one town and deliver in another
β¬1200
wtf
If I wanted a Caravelle size it was β¬8500
Those prices are just hilarious and really just made for really short time ranges, just like AirBNB
good lord
thankfully i've only ever needed a rental once and the insurance of the person who hit me paid for it
Per night in a hotel here is between β¬100 and β¬200 so Airbnb that rents out rooms for β¬60 are very popular
i've only been in two car crashes, and i wasn't moving in either of them. both not my fault of course
60*30 isn't a great deal then tho
I drive 40000km per year, I've been in one car crash ever, in 2003
that's a lot of mileage
also what do you call mileage?
or would you just say distance
I just say driving distance per year π
i drive prolly double that
ah makes sense
Work pays for most of it
always good
Honestly I yet had just 2 -real- crashes yet, while I didn't want the first I actually provoked the 2nd. But that motherfucker deserved it and even got bluffed at from the police because he was acting really retarded π
60k miles per year
Ooof @dull chasm
He said that already was like that when the police watched and heard the happening lol
@dull chasm 60 / 40 = 2??
This year I've only had 20000km though since I work 50%
huh ^^^^
Km Vs miles π
he was doing km and i am doing miles
To be fair, we are both doing a distance
Human measuring system vs ... I'm not allowed to say I guess
yep go sit in corner
Regardless of denomination π
lol
Florbs per snoorka
i just polished my grapple
Is the new term
any muse fans here
Muse is ok
just ok?!
But I'm hot for Bellamys Kaosspad setup
They are decent, but not even in my top 100, but drones is a great album
fair enough
not everyone's cup of coffee i guess
or cup of tea in the UK
(jk it's cup of tea everywhere)
Catchy but usually only for a few tracks at a time
royal blood is good too
But I do enjoy their music videos, and the vr one is fun
oh man, you've gotta watch the panic station music video if you haven't already
hilarious
it's like a fever dream
Watch the music video for "Panic Station" now! Get Muse's album THE 2ND LAW here: http://smarturl.it/the2ndlaw http://muse.mu http://instagram.com/muse http:...
mozarts requiem ....best ever made
yep .... i like baroque more than classical but you gotta love mozarts introduction of piano and classic period
If you haven't already heard it I recommend Benjamin Brittens War Requiem @dull chasm
Test the bass with some good old Angerfist
yes i have but i dont own a copy ....wish i did
@boreal pewter or bjΓΆrk hyperballad
kinda out of my time period but its still good ....the classical period just gets over the top sometimes
Are TP-Link Kasa wifi switches any good?
Aye, Carmina buerana should suit you too @dull chasm
I am looking for an inexpensive temperature/humidity sensor to use in my house and possibly one outside. What are your recommendations? I don't have zigbee or z-wave so it would have to be bluetooth or wi-fi
diy
@opal flume tp-link is generally regarded as a good brand. i have a few of their smart outlets and those are good
what do you mean by "What a question"
One would usually look up ANY product he wants if it exists from Xiaomi
#1 brand of the world
they don't fit the question Anon
They do but good reading bro
@opal flume I have 4 kasa switches and they work great! I got the energy monitoring ones and they work great!
@boreal pewter Are you talking about this one?
Isn't that one Zigbee? I don't have zigbee in my setup
@clear ferry prolly my always goto https://www.youtube.com/watch?v=n7gRdfqOGPI and this a great movie if you never saw https://www.youtube.com/watch?v=R1iannfXlYE
bad mistake then
@dark swallow yes, but you can get the xiaomi hub for it
Depending on what you need you can do pretty cheap sensors with a nodemcu as well and connect through wifi. Hard to run battery powered though
Never have gotten deep into hΓ€ndel, the wife loves it though, and has done some with choirs
hm... Interesting @orchid rose I don't need it to be battery powered for the indoor one which is the one I really want soon. So I might look into the diy options
Also @boreal pewter I want to get into zigbee/zwave for the number of devices available it's just I don't have a need for it at this time because most of my lights are already on Lutron
I have one diy one for the sauna as the commercial options are usually only up to 60 Celsius so the options were very limited
That sure is ok but looking at the Zigbee devices that come in most handy I think it's worth it
Like I use the Xiami sensors and Osram Smart Plugs
And tho, Zigbee is a repeater mesh system and probably more reliable in that case instead of bluetooth or wifi if you're not running 10 repeaters lol
I really wish I knew what frequency my Lutron stuff runs on because I know it is either in the zigbee or zwave ranges and don't want to get interference
and yeah that's what I figured with bluetooth/wifi but the idea is that the sensor would be like 5 feet from the machine running HA with a direct line of site so I figured bluetooth might work
but I'm sure once I get one temp sensor I will want more so...
Maybe, but you lock yourself to future expansions
Then some day you want it in the bedroom, floor, garage and... fucked
yeah....
well not really. You can always just buy the zigbee/zwave/whatever then. Wifi or bluetooth aren't going to go away anytime soon
You miss the point here
so maybe zigbee is the way to go just to simplify it for the future so i don't have to mess with wifi/bt and zigbee
He then could throw away the bluetooth sensor then first (wasted money) and spend again on buying new Zigbee devices (waste of money again)
But yeah.. fuck economy
why would you need to throw away the bt sensor?
Because it is not the same as Zigbees...
I don't get it... I currently run wifi, bt and zigbee and haven't had to throw any of them out
Basically what @boreal pewter is saying is to pick one standard and stick to it so it's less confusing and more streamlined in the future for upgrades and breaking changes
And u use 3 different sensors for the same thing of measurement? Like temp? You really must be a fan of inconsistency
Yeah you are going to get some deviations
if you have 3 different brands reading temp they may be all off a few degrees in opposite directions but when you buy they same brand they will most likely be off the same amount in the same direction
Maybe I should put 1,5 bar in the front left wheel, 2 bar in the front right, 2,5 in the left back and 3 in the right back 
It's your choice ofc, but I don't see it as a problem. Depends on your usage ofc
Some people call it being organized and work structured, others personal preferences
it's very limiting to get stuck on one platform imo, which is why HA is so great in the first place
Well let's agree to something simple: Decide on price, future proof, connection range and expandability
cough Zigbee and Xiaomi cough
at least for the first two, diy wins π
you need medicine for that cough @boreal pewter
Yeah I really get ill lately π
Ok probably a dumb question but what's the difference between zigbee and zwave and why pick one over the other?
Zigbee wins connection range ofc because a 12 bucks Osram Plug is a repeater and then please show me the regarding 12 bucks wifi repeater
Or better dont else I cry
I haven't really checked out Zwave honestly, the products I wanted and found just seemed too expensive in regards what is offered for Zigbee
But idk
so just a little note, I just got a wyze cam (rebranded xiaomi cam sold in US) because it was super cheap and I noticed they have sensors that pair to a device that attaches to the back of the cam and now I really wish they had a temp sensor and not just door and motion ones
Technically off topic here, but Z-Wave is a full standard, and Zigbee isn't. That means that any Z-Wave device will work with any Z-Wave controller, which isn't the case for Zigbee. Even better with Z-Wave Plus, the basic features of any device will work even if the controlling software doesn't know about it
That's probably why single products are more expensive?
Z-Wave in general costs more because devices are certified
Ah that makes sense thanks @clever mortar
My experience with both is that Z-Wave devices are more configurable, Zigbee are cheaper, and both are a PITA at times
I mean your going to get issues with anything so just which pita do you want to deal with
In my case... apparently both π
Z-Wave multi-sensors are just so much better than the Zigbee ones, but Zigbee door/window sensors are so damn cheap
I had some issues with the xiaomi hub a few weeks ago out of nowhere. I think it was some multicast issue with the router as it kinda fixed itself after some sweat, tears and a few reboots later
My Xiaomi Gateway broke like a week after receiving but I wasn't planning to use it as a gateway tho since you would lock yourself to Xiaomi only but I also use Osram Plugs for example. So everything runs over my Conbee2 and Deconz anyway
the whole zigbee thing was a bit confusing for me when I first started which is why I got the xiaomi gateway for the few sensors I got. Thankfully it has worked fine other than this weird connection issue which I blame my Netgear router for. Most issues with my home automation have been caused by that damn router π
That was my mistake too and thus why I don't care for it and use Conbee π
@dark swallow same. I don't have a wyze cam so I use the wyze sense custom component which lets you plug the wyze bridge into the pi. I also wish they had temp/humidity sensors
@orchid rose the last time my google wifi router updated its firmware, half of my devices didn't reconnect to it. i thought hass was screwed up at first
Static IP...
wait, does that not work?
I think I've managed to set up SSH π
what do you mean by set up ssh?
@scenic radish hmm, I've managed to create rsa keys
and I think I can access it from my PC through
yet, I think there is still much to do as i need to create firewall
and disable root
oh i see
That's stops passwords being used with SSH
Also set PermitRootLogin to either no or without-password
thank you π
this is just for the ssh server login right?
i mean i still can access root with su from ssh but that is normal
but with this disabled I cannot login from another computer with pw and I can only connect if I copy the public rsa key to the other computer
okay
man sudo
everything seems fine right now, tomorrow I will try to setup firewall. I updated things, i set SSH with keys, disabled password possibility, will set up firewall tomorrow
do you suggest any very important thing to do apart from these?
Sleep?
that seems like a wise idea
thank you for your help π
have a nice evening, a good night for all! π
Down at my parents, it's DOCSIS over the air... Don't even want to know how many compromises are involved there π
thats like watching a train wreck, I have to google it and see how it works now
the mpeg 2 and docsis over wifi comments just make me realize how much processing happens at my house to watch fox/abc/OTA channels.
I pick up the channels via a roof mounted antenna, run the signals through coax lines into a box, that box converts it to an ethernet signal, then the signal goes into a server for transcoding, then it leaves the server via ethernet, runs through 2 power line adapters, and into a wifi access point, all so a roku in my garage can display the 5'oclock news.
so why is it that i can access my router setting from my phone but not my pc? Both are connected to same network
@clear mirage what router do you have and do you have a separate WiFi access point
i'm using a Linysks E1200 and for my internet access i have a ATT U-Verse router/modem (ARRIS BGW210-700). I have the IP Passthrough set up on the ATT router
made my first addon \o/
its a local speedtest thing
anyone running on a pi free to check it runs on there ?
how do you log into the router on the computer? via its ip address?
and how do you log in via phone
@balmy inlet i use the ip address on both. I can access the ATT router config, just not the Linsksys one
what are the ip addresses?
for the linysks its 192.168.0.1 and the att is 192.168.1.254
you can access both on the phone?
yup. Phone is Samsung galaxy note 9
Hello guys! Good night to you all.
whats the ip address of the phone and computer?
I wonder there is a good soul to help me out setting up a new Ubiquiti network? Newbie here
Iβve got this stuff:
last i checked they were both in the 192.168.0... range
If anyone could help Iβll be glad. Thanks.
is the wan address for your liksys router your actual WAN ip address?
that i do not know.. how would i find that out?
@silver night - you have 2 routers and no PoE switch. The NanoStations are used for point to point wireless, do you have two separate buildings you are trying to connect?
@humble pond yes! The Idea is to have two separated networks sharing the same WAN. Goes like this: ISP - GW - AP AC LR as the first network, all conexΓ΅es to the switch with one RPI running Hassio and Ubiquiti controller (addon). Than from a port of the switch the other network: Nano - Nano - regular switch - AP AC LR
Maybe the first one as 192.168.1.1 and the other as 192.168.2.1
Ah and there is another Hassio on the second network as well π
@balmy inlet Both the WAN IP addresses of the att router and linysks router are the same.
Since both AP comes with POE adapters I can use them on the second network, the first one just the POE switch
First thing first, you need to choose between the edge router and the USG. If you are running hassio, there is an addon for the unifi controller software, so Iβd pick the USG.
Yes, I agree. The edgerouter idea was at first to use those POE ports and connect the first network together.
If you want two different sub nets, that is all controlled though the controller software, so no problems there, but if you have any hardwired devices on the other end, you need a managed switch to tag it with a different vlan.
So basically, you need 2 UniFi PoE switches that I donβt see in that picture.
@clear mirage what is your gateway address for you phone and computer? and for your routers? may help to change your gateway on yourPC to 255.255.254.0 that would put both the 192.168.0.x and the 192.168.1.x ip ranges into the same subnet
The idea was to use the only edgerouter to set one port as another vlan, so I just connect those nanostations and what happens after that, it is just another vlan
Wouldnβt that work?
Or a separate PoE injector and daisy chain the AP off the Nano on the other end, with no hardwire. I donβt recall, do the nanos come with injectors?
I wouldnβt recommend setting it up with two routers.
The router will want to act like a router when you really need a switch.
Sent you a PM π
@balmy inlet well not sure how but i'm now able to get to the linysks router settings
did you change the gateway on your computer?
i meant did you change the subnet mask? (the 255.255.255.0 to 255.255.254.0)
if its working I would leave it alone for now π
Anyone use caseta devices at all? I'm a bit confused because I've seen people mention that you need the pro version of the bridge to use the pico remote as a trigger ... But I haven't had issue with it and don't have the pro version.
actually i didnt really do anything
Any of you guys use IPTV and familiar with how it works?
So I had an interesting experience last week regarding a lightning storm causing a power surge that momentarily turned some of my lights connected to smart switches ON.
Iβve experienced power surges causing lights that were on to flicker off before, but never the other way around. No devices were fried, but has anyone else experienced this? Any cause for concern? If I think about it the way smart switches work makes it more likely that electricity can make the jump during a surge versus a normal switch. It was just... unexpected.
hello
Got my nodes
3 node baremetal k8s cluster here I come
Now all I need is spare time πΏ
how you guys set up firewall iptables?
is there a faster way then putting everything there manually?
firehole/shorewall
also the simple ubuntu one...shit . can't remember what its called
oh . ufw
@past idol ^^
ufw is pretty good, wouldn't call it the "ubuntu one" tho
But UFW is not a firewall per definition, it really just configures iptables in short commands. Can recommend
I don't know either, but at the end you will only need ONE firewall. The system default is iptables and there is no need to overcomplicate things
UFW is as easy as ufw allow ssh/tcp allow 80/tcp, allow 443/tcp, ufw enable, done
Default allow outgoing and deny incoming is already set
Using docker and debian with Firewall will be a bit tricky when u use host connections but that's #449717345808547842 then
@humble pond what kind of smart switches? If I would take a guess I would guess they trigger based on a pulse or very low voltage that could easily happen with surges in the grid I would think
@boreal pewter thank you
did that exactly
by the way guys which Smart home devices do you suggest to get as a beginner?
any good ones? must haves?
You're starting from the wrong place. Start by thinking what you want to do.
Starting with the shiny toy just means you spend money. Starting with a goal means you achieve something.
We need a dev-tools-hammer emoticon!
Is it from the MDI site?
Or can you otherwise point me at the source, and then I'll "make it so"
you are right
but i Bet there was moments when you heard about new things and realized that would come handy
Seems to be mdi:hammer
Gimmie five
π
Nice!

interesting, Freenas comes with the option to deploy a docker host, and it installs rancher
guys
I find it always bites you in the long run
if I want to access my server via ssh outside my network which is the best/safest solution?
I mean I thought of port forwarding at first
Relying on other OS to manage docker packages
but what if my IP changes
Ddns handles your ip changing
should I get a Dynamic DNS?
You rather need it
ah that was my second thought also
I have a real domain and I use ddns to update it
thanks Tinkerer π
π¬
@clear ferry what is happened, why you switched?
They no longer support those looking for a free or low cost service
Then again, I have my own domain, hosted with a DNS provider that supports dynamic DNS
Being an awkward git I'm self hosting and have a hidden bind master which does bog standard dynamic dns.
Integrated with DHCP so when I bring up a new Pi, I make sure the correct hostname is set so that as soon as it's up I can ssh to it by hostname.
Also makes DNS verification with Let's Encrypt relative easy.
If you want something with a public API to update, I've been playing with https://ns1.com recently and they're damn nice.
@clear ferry - Z-Wave switches. Inovelli, HomeSeer, and Zooz.
Wow, storage has gotten cheap: https://www.amazon.co.uk/WD-Book-Desktop-Hard-Drive/dp/B01LWVT81X
Yeah unlimited doesn't cost that much per month
@strange vapor if we could only see those prices in norway, I bought cheap 10TB external drives for Β£205 and shucked them
@boreal pewter Any time I've looked at the "unlimited" storage options, either the cost is higher than I want to pay, or the SLA is basically non-existent. For backup these days, I'm just using Glacier. Fastest option to get data up there? Hook HD up to local NAS, get a copy of the data, drive 20 mins to DC to swap external DCs, and use the nice GigE connection on a servdre that's 3 hops from AWS' 100Gb/s INEX connection π
Home connection is DSL which means shitty upload speeds.
DSL, that is the broadest band in ireland anyway ? π€£
only thing avaliable in the Dublin6 when I lived there was 3G antenna on the roof
@clear ferry Should have FTTH before long.
It's already at the kurb, but I want to stick with the ISP I'm on and they won't be able to offer it in the town I'm in till next year.
@strange vapor Googles monthly price is really low in regards to unlimited. And I don't need a SLA either, if Google some day would go offline that probably has some more worldwide impact than just my storage lol
Google drive @boreal pewter ?
Sure
Yep Gsuite ofc
@strange vapor I glacier as well, and was forever on not-fast DSL (currently on slightly faster cable, but not by much). Anyway, I scripted uploading via mt-aws-glacier and have it run nightly from whenever to whenever, sucking up the at the time entire almost-half megabit of crash-prone upload I had.
It took just over a month to sync my 75 TB, daily syncing is only a few moments per night at most.
That's in addition to making a local backup via ZFS send/receive to an external USB drive connected via microusb, which is well known for barely letting enough current to pass to run an SSD let alone to let enough across to fry the device plugged into it.
@clear ferry hey, some weeks ago, probably you and another guy here (i keep forgetting his username) bought a few more Lonsonho plugs. Recall this?
Mines arrived today. Can't be flashed :/
Did you try the search function?
@midnight adder
#diy-archived would be the place to ask for help in flashing things
well, not really a help. Just to know if you/Quatroking succeeded :/
But yeah i might as well move this there
@gritty jewel The DC is close enough that when I have a large amount to upload it's not exactly hard to get there. Latency is a bit much, but the bandwidth is damn nice when it gets going π
Sure! I had contemplated taking my entire little server in to work and letting it upload on our Gb connection there, but ... a month of ignoring it was all it took to get initially synced, so good enough. (Now I work from home anyway...)
Now it's entirely hands-off. I monitor it with Splunk by watching the mt-glacier log files, but I don't have alerts or anything set up because I'm in there often enough for confirmation (approximately weekly to bi-weekly.)
My work will be getting new internet... Soonn ....
ADSL is killing me
Can't do anything when someone is uploading
asymmetric connections suck - well, at least when they're highly asymmetric.
I recall the early days when the download speed of many broadband connections was saturating upload with acks.
E.g. 25x1 connections, and you'd rarely get more than 15 or maybe 20 Mb download because your 1 up was saturated at that point.
Sounds like internet in Norway 10-15 years ago π
We got 50/50 via fiber in 2004
Now I have 500/500 but I can have 1000/1000 buy the price point isn't interesting yet
I have 150/10 out here in the US for $50/month... gotta love cell carriers and ISPs out here...
although i do apparently get closer to 175 down according to my router
I pay $78 for 500/500
i also had to negotiate for $50/month, normally it's $80...
I think the Swedes can get gigabit for the same price
although i guess we have to consider that it would be an unfeasible project to replace all the copper wire that feeds our internet in the US
fiber is rolling out...slowly
You should just split the country into 50 countries, easier to get stuff doneπ
The United Countries of the Deunited States of America
@clear ferry should be cheaper here in norway though. altibox is steadily pushing up the prices to sell their tv package
Lucky me I guess, Iβm in the US and pay $75 for gigabit fiber connection.
I'd be happy with 50 Mbs
I'm happy with my 150, but I recognize how incredibly fortunate I am to have that available
Our consumer options tend to be very asymmetric. I currently have 10/2 which I get for "free" (part of rent) and for 10β¬/mo I could upgrade it to 100/10 I think
highest is 1Gbps but I think even that is pretty low upload speed
that's more like Norway, we never have much snow, just cold brrrrr
Whereabouts you live? Helsinki?
600km north, Oulu
I know people in Oulu!
oh no
If you aren't a big bouncer with skinhead or a cute girl called Maria with a German surname it ain't you!
im kinda torn between august locks and schlage. i think schlage looks better but august has more features and more compatible. and i found a deal for one for 130... anyone unhappy with their august?
I used to play wow in a Finnish guild, so I've been to Finland multiple times and know quite a few people π
That picture could have stood in for us this year too (normally we are slightly less snow on the ground, only 2ish feet, but this past year we just got dumped on and dumped on from January to March, ended up with about 6 feet piled up (what, just under 2 meters?)
(BTW, northern Wisconsin - the cold and snowy part, not the warm sultry southern part)
@pliant forge what provider and where are you at in the US?
Isn't the only good thing yet in the US this Google Fiber thingy?
But it's not everywhere available right?
yeah, that's the only one that i know of at least
i mean, i'm happy with my 150 mbps down, the only large files i ever download are games or game updates and those are done pretty quick
So I'm thinking about upgrading from a RPi to a Nuc or similar mini PC. I found this on amazon, would this be sufficient for HA? Fanless Mini PC,Intel Atom x5-Z8350 HD Graphics, Mini Computer Windows 10 pro(64bit),DDR3 2GB 32GB eMMC 1000M LAN/2.4G+5G WiFi/BT4.2 HDMI/VGA Dual Output https://www.amazon.com/dp/B07GT6SBP6/ref=cm_sw_r_cp_apa_i_PTsCDbBATRVNM
Get a Deskmini
apparently i can get 1000mbps down from xfinity for $80/month...how did i not know this is a thing
Other than I/O (storage) speed, a Pi3 is enough for HA. Any NUC will be fine
@scenic radish MN, century link.
Or if you want to have a better price / performance than any NUC, a Deskmini
1 gig up and 1 gig down.
Came across this on a lightning deal - Fanless Mini PC 2GB DDR3/32GB eMMC Intel x5-Z8350 Mini Desktop Computer Windows 10 Pro HD Graphics HDMI and VGA Port Dual Band WiFi BT4.2 USB3.0 Wake on LAN PXE Boot Auto Power On https://www.amazon.com/dp/B07VN6DF6Q/ref=cm_sw_r_cp_apa_i_.XsCDbAF4XYTW
@clear mirage what's your current hass installation look like? i'm running hassio on raspbian on an ssd and i'm happy with the performance
better than a microsd, have all the hassio addons, and can install other things on the ssd
@scenic radish I'm running Hassio on a rpi3 of a 32gb sd card. I've been looking to upgrade since I've been having issues with my pi, my network and hassio for the last week and a half or so.
oh gotcha
that mini pc is a bit on the slow side, but should be plenty fast for a regular HA setup and maybe something else as well
@scenic radish so I take it you have something like this? Geekworm Raspberry Pi 3 B+/3B SATA HDD/SSD Storage Expansion Board, X820 V3.0 USB 3.0 Mobile Hard Disk Module for 2.5 Inch SATA HDD/SSD/Raspberry Pi 3 Model B+ (B Plus)/3 B/ROCK64/Tinker Board https://www.amazon.com/dp/B073CGQD9C/ref=cm_sw_r_cp_apa_i_..sCDb4S5XDKA
i'm just using a usb-sata adapter (this one: https://www.amazon.com/gp/product/B011M8YACM/ref=ppx_yo_dt_b_asin_title_o05_s00?ie=UTF8&psc=1) with an ssd
a different brand of adapter i tried didn't work, so i learned apparently the brand can make a difference.
i have a 3b+ so USB boot is enabled by default. depending on your model, you might need to set the USB boot bit: https://www.raspberrypi.org/documentation/hardware/raspberrypi/bootmodes/msd.md
This section contains documentation with technical information about the Raspberry Pi hardware, including official add-ons and the Pi itself.
Ah ok. So I could just get that and a sad. For neatness sake though I'd like to have in all in one setup
Hey folks!
Anyone have recommendations for portable ac units? The place I just moved to can not use the window-install type. I've seen the types with tubes to vent out, which is likely the type I will need.
I'm hoping to somehow integrate one with HA, likely with some sort of make-shift thermostat.
when you usually wake up guys
@chilly nymph that would be nice π
twas around 31 celsius in the apartment
need to solve that next summer
@past idol you have any units you can vouch for?
@chilly nymph sadly not yet
Ok
this was my first summer here
and this temperature was new for me too π
it is tolerable during the day
but hell to sleep in
I had accomplished something years ago with some window units and a plug in pid with openhab
But I can't seem to find a portable one that isn't "digital"
i've also seen some smaller units around
probably need an ir-blaster for that
but no info about that
I'm assuming so @unkempt umbra
Which is fine
My main unaddressed concern is noise, particularly while watching TV and such
anyone from sweden?
I'm pretty sure the entirety of sweden is devoid of people
Just wandering animals
π
@unreal orbit atleast 60% og it is just forest
The Swedes love pushing everyone in to the biggest cities
Drove for 700km in Sweden seeing less than 20 houses
Nintendo switch with nintendo online (as they now also launching NES and SNES games) or a rpi 4?
Are those really comparable financial decisions?
Lol
The Rpi4 will have the entire library vs a select few games
Raspberry pi with lakka
@unreal orbit toyota camry or nissan gt-r?
1970 Gremlin
a man of culture, i see
I would like to get a Switch... but it's 2019 and I don't buy a non-4k console
@unreal orbit no not really comparable, but still. If you put money aside π
i was more thinking about the retro aspect
I could care less about 4K except in vr and work screen
maybe a pokemon switch game might be fun to play as well. With the Rpi 4 one have to wait for a nes case as well as retropie, so also bit tempted to just go with rpi 3b+ as the retroflag case is already made and retropie works etc
how is the retro game support?
I saw that they are coming with some snes included in nintendo online now?
maybe I should just settle with my bittboy and reconsider this when I actually have time π
now my home assistant is settled, the media server is working, unifi network is installed so then I start with something new.. haha
And more sensors
Ha kinda does that to you
Add sensors to every door in the house
Per room presence detection
I have so many sensors
Add an alarm system to ha
tried out the presence detection, but didnt work properly for us..
alarm might be one thing yes π
Add seasonal themes
Have the lights change colors
Most important the media_light automation
And stop media when Roborock starts
Circadian lightning
To be honest, the most tempting this for me now is: Rpi 4 NAS, retropie on a pi, more ubiquiti gear, maybe alarm + camera(more needed if we buy a bigger place)
Themes for every holiday that trigger automations
Iβm holding out for the UniFi UDM
UDM?
idk
@boreal pewter itβs basically the future new os and new hardware base for UniFi
Build root instead of Debian, arm hardware instead of mips
Err which devices?
The UDM is UniFi testing a redesign for everything else in the future
There was a link here a while back to really damn nice Lovelace setup with time input implemented, I believe for setting a heating system. Anyone remember it and have the link?
Looking to do a similar time input system.
I'd assume that any lovelace setup would be posted in the #frontend-archived channel...
Have you searched the history of that channel?
Yup, my search seems week.
Checking Twitter now to see if it was a retweet there.
I know it looks weird, but my wife is super happy now that she can change heating, hot water and towel rails schedule without editing yaml files. #homeassistant #homeautomation #knx @home_assistant https://t.co/9ZH7nL6WHo
That dude has heated towel rails? That seems a bit excessive to me π€£
Hey - When the Wife want it π€·
Dam, I need this in the future
My wife is going to love this
It is going to increase my spending budget
Wafπ―
mine would send me to an psychologist
I would get committed for sure if I installed heated towel rails when it's 40C outside
Have it only trigger when itβs cold π₯Ά lol
It doesn't get cold where I'm at
but that wife is wild..
She's edeting yaml... by herself... π
I am way too protective of my setup to let anyone else edit my files
I would madam let on it.. even if she's braking stuff. still got backups. But there is no intrest
I break enough things without anyone else's help π
I feel like homeassistant is transitioning more and more to a pure frontend config
There's more and more things now which can only be setup in the frontend
yep
waves
RIP my cicd processes :(
Not a fan of the over reliance on UI eithet. With text and version control you have a chance of reverting a screw up. Already have run into lots of odd little issues with the Unifi integration π
I hope the automations never go to a pure UI based system, I like my YAML and jinja now that I understand it
Alright, so here's a super random question for y'all! Does anyone have any recommendations for a secure, smart dog door? Doesn't necessarily need to integrate with Home Assistant, but would be good if it could.
I think we can expect component config to go mostly UI based, but things like automations/scripts/etc will remain yaml/text based for quite some time
I understand why the config needs to move to frontend
But it does make homeassistant a definite pet, not cattle
But hey π€·
Still better than trying to hand craft it myself
@past idol yes why?
what method r u using to let it through properly?
I used this
wondering if it is okay
@past idol but thats the entire point of a published port?
I dont see the issue
I see a solution to a non issue
π
If you publish a port, you want the dam internet to access it @past idol
And docker makes a rule in iptables, which is what UFW uses
They co exist with 0 issues
hmm
If you donβt want the internet to access it, why the hell are you not using docker bridge networking or using docker overlay networking for swarms
More or less, that is a big topic. You can change configs to make docker not automatically open the port via UFW. As well as u usually don't want that. There are not that many services which you would want to publish tho
My point above stands
"Using docker and debian with Firewall will be a bit tricky when u use host connections but that's #449717345808547842 then" Anon said
maybe I misinterpreted
HOST CONNECTION
If you have a service like Netdata on HOST you need to bind it to the docker's gateway IP of the network of the reverse-proxy. So they connect via 172.20.0.1 for example
But I assume if you are using host networking, same applies
Thus you use a bridge network to connect to host with the reverse-proxy
At least as much as possible
The final key is my reverse proxy or gateway
will install netdata right now
I have extended networking to put DB's in it's own internal network
Thatβs where I usually do my firewalls
