Posts by fredfred

Well... no matter what router or whatever you use, there is always DNS-O-Matic - I've been using it for years.

May I suggest using this for EPG: https://github.com/xteve-project/xTeVe

Then get you TVH to use the file generated by xTeVe.

Quote from elsmandino

It has only ever happened once but I remember (a few years back) that I updated OMV and suddenly TVHeadend would not work anymore - I assume that Docker/Portainer would have prevented this?

Containers are more or less isolated from the host they run on, as long as docker is fine on the host so should the container be.

Quote from elsmandino

May I ask what hardware you are running that on?

The one thing that I have never used is Docker - might have to look into the benefits of that as it seems to be very popular, now.

Well, I don't think I run OMV like most ppl here do, I run my OMV as a VM on a Windows machine, so in Hyper-V. The reason for that is my old Workstation is the family computer used by anyone in the house for checking some websites and our common schedule and things like that, was just sitting there and was almost always on - just lacked some disks and then it was ready to be "the house server".

Most ppl I think run OMV on hardware and part of that is to get RAID and stuff like that sorted. In my case it was just more convenient to get that stuff done on the physical Windows machine then wiping it and doing it all over again...

Also, may I urge you to run OMV (and anything else for that matter) run it in a VM no matter what platform you choose to run it on, specially since you a new to this stuff - the benefit of testing/running on a VM is that you can do a checkpoint/snapshot or whatever you wanna call it BEFORE making changes you are unsure off, that way you can easily come back to a running state and keep going. I think I went trough two or three installs and multiple checkpoints before starting to grasp all of this.

And when it's time to swap out that old hardware, you will be very happy that you are running on a VM that you can just give a new home and spin up and be all done with all config : )

That being said, other users here argue that OMV IS the platform and on IT you run the VMs, I'm not to say whats the better choice I'm just letting you now how I run it and why.

So.. spin up a VM and test out OMV, you WILL fall in love

There are some great videos made by Technodad and DBtech (and others) to get you started with dockers, but I urge you when doing dockers to ALWAYS go for a stack config (docker-compose), harder to learn and understand, but you will thank me later.

Anyway, for the config of my VM is like this: (the physical cpu is a Intel Core i7 39030k at 3.2GHz)

4 virtual processors

8 GB RAM

OS Disk for OMV = 10 GB (only for OMV, nothing else! 5 GB used)

Docker-Disk = 50GB (only for containers and config, 7GB used)

DataDisk = 1TB (only for mediafiles as described above, 650GB used)

Transcode = 40GB (Only for transcoding in Emby/Plex and Tvheadend Timeshift)

I hope this explains a thing or two, best of luck and welcome to the community!

I mainly use my OMV for media/TV, OMV itself is used for file sharing and storing docker things and that is configured in Portainer.

These are some of my containers and a little what they do.

TVHeadend, my OTA TV channels.

Emby, Movies/TV Shows/Photos - and Camera upload from my phone.

Plex (Some of my friends prefer it over Emby)

Wireguard (My home VPN)

Swag - Reverse proxy and certificate manager responsible for publishing some of my services to internetz.

Watchtower to keep containers up to date.

What service do you guys use for mail notifications from OMV?

I've been using outlook.com for a while, but that account is now locked due to "suspicious activity" .. my guess is that outlook.com dont want me to use their service just to get notifications from a system that never is online and view their ads or buys other products...

I dont want to use any or my normal accounts cuz I change passwords regularly OR use MFA to get access to them, and that would kind of break OMV notifications.

So... how do you do this?

I wont go in to what platform, how much performance you loose running what on where... but I must say running OMV (or anything else for that matter) as a VM makes backup and configuration much simpler.

If you need to change something that you are not so sure of use a snapshot or checkpoint or what ever you wanna call it, make the change and if things go bad just go back to the snapshot/checkpoint..

If the VM is backed up everything in that VM is backed up and configured just like it was when the VM was backed up, so a restore operation of the whole thing (or moving to different hardware) is sooo simple.

But there are also downsides to this, usually when you backup a VM its hard to exclude certain things from the VM that you normally would not backup - so if you have a large scratch space, temporary files and what not - those would be included too...

I run OMV on my Windows machine as a Hyper-V VM, every week I have powershell script that backs it up to another disk and that works just fine for me.

Then again, I don't have any specific needs for performance and do not need to get everything I can out of the hardware I have, just a simple OMV that shares some files and some light containers that run pretty simple things.

I've been running omv-upgrade as a cron for almost a year, no problems.

For all containers I'm using watchtower for the same period of time, and that works good to..

Both run weekly AFTER a compete backup of the VM running OMV.

So all my stuff is always updated, and so far so good

You have a windows machine, on that create a VM using Hyper-V (search the internetz on how to do that) and in there install OMV and try it out, no need to install KVM or whatever just to test OMV., unless you really want to.

Dear all,

This question may not be directly concerning OMV, but OMV might be part of the solution. If a moderator thinks that this is to "off topic" please toss this post and notify me and I'll take it elsewhere.

So, where do you guys store your passwords and what solution are you using for it?

If may not be just passwords but other sensitive data like passport number and other things.

My toughs are something like this... If I use a cloud service like Bitwarden or others my passwords are accessible on "the internets" and from anywhere or anyone with my credentials. This may be useful but it also poses a risk. I can imagine that many people are very interested in obtaining not just my credentials but everyone's credentials... and we have seen many examples of data leakage in the past.

If I setup something local I have to manage everything, configuration, security, backup/restore and all that... If I go this route - what do you suggest and why?

First off, THANKS for taking the time!

On my router port 80 is forwarded directly to the docker container, to make sure I shutdown SWAG and connection is still fine.

I created another Wireguard container did all the bells and whistles, used the default port and opened the default port on my router and all that... everything connected and works fine. I now tried to PING some stuff and that works to, BUT I cannot even PING the container running Piehole. I tried to ping another container (also macvlan) and I cannot ping that one either.

So, I'm pretty sure it's Docker networking something... but I have no idea what or how to troubleshoot OR solve it.... anyone?

Quote from Soma

Maybe something to ask on the Pihole forum.

It only does NOT work when coming from Wireguard connection so I cant imagine it being a piehole problem...

I do not route Wireguard trough SWAG, what I wrote is that I use SWAG on port 443, I use Wireguard on port 80.

I know that putting 0.0.0.0/0 will allow my clients internet access.

What I still do not know OR understand is WHY I cannot get my piehole working when changing from PEERDNS from =auto to PEERDNS=IP.Of.Piehole

Quote from alvaronbg

should I do a clean installation?

That is ALWAYS best to do, it's hard to trust a system ever again if it have been in this situation, kind of like a cheating GF

So yes, that's what I'd do.

The ports I use DO work (been running like that for more than a week), I must do it that way to allow access from Public WiFi that usually only allow 80/443, and on 443 I have SWAG running.

You and I are doing the exact same thing besides I use port 80 to make the connection, and you use allowed IPs to only your local subnet and I allow my clients to escape the local network out to the internet, this is exactly what I want.

I want my tunnel to always be active and route all traffic from a public wifi or wherever I am, trough the tunnel home and access the internet from my home connection, and part of that is to use my piehole for dns to remove ads and protect my device from accessing bad things - even when on the run.

So like I wrote in my first post, everything work just fine BUT as soon as I change PEERDNS from =auto to PEERDNS=IP.Of.Piehole name resolution stops...

Hmmm apperently I dont

Below is my stack, commented is what I THINK I need to change, am I right?

I only have my two clients and I have no problem updating them.

---
version: "2.1"
services:
  wireguard:
    image: ghcr.io/linuxserver/wireguard
    container_name: wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1002
      - PGID=100
      - TZ=Europe/Stockholm
      - SERVERURL=mywg.domain.net
      - SERVERPORT=80 #optional
      - PEERS=Laptop,Phone
#      - PEERDNS=192.168.1.199 #optional
      - PEERDNS=auto #optional
      - INTERNAL_SUBNET=10.13.13.0 #optional
#      - INTERNAL_SUBNET=192.168.1.0 #optional
      - ALLOWEDIPS=0.0.0.0/0 #optional
    volumes:
      - /srv/dev-disk-by-uuid-.../config/wireguard/config:/config
      - /lib/modules:/lib/modules
    ports:
      - 80:51820/udp
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: always

Dear all.

This probably have nothing to do with Wireguard itself, probably more with docker networking, MAC-VLAN and docker routing...

I have a Piehole in docker setup using macvlan so that it have its on IP on my LAN, this works just fine on my local network with local clients.

I have a Wireguard Server setup in docker and it works just fine when using PEERDNS=auto, if I change this to PEERDNS=IP.Of.Piehole nameresolution stops.

So... ?

I am willing to change whatever and also, my Piehole was manually setup a long time ago, so far ago that I think I manually setup the stuff in Portainer using technodad method and not a stack. I'd rather get this stuff done right and have it as a stack since its much simpler that way.

But, to do that right and I need to understand why my current setup does not work, and then what I need to do to get this done right.

Dear all.

Yesterday I was talking to a buddy of mine who have a problem, how to handle his whole family's pictures.

They are two adults and two kids, I think they all have iphones and they take lots lots of photos, lots. Sometimes they also do recordings and small movies.

How they do it today.

Hook the phones with a cable to a computer, copy the photos and removes old and unused stuff from the phones. If they are on a trip when the computer is not with them they have to wait or manually select what to keep and what to remove, imagine trying to get a five-year old to select what to keep and what to delete.

I have OMV5 with some dockers and stuff so I could either host something for them to try it out, if they like it I can help them build something to run OMV and something more... but what is that something more? Preferably a docker container on OMV.

So I came to think about this wonderful community and I'm pretty sure some of you do this in a much better way, so let the ideas fly!

I want to run Wireguard and I am reluctant to run it on my OMV host, so I'd like to run it in a docker container.

Now, been trying to read up on how to do this and found in the fine print that you should set OMV-Extras, Docker, Iptables = Use Legacy

And... not being that at home in all this stuff.. anyone have some additional info on what this does... and what I could possibly break by doing this?

Also, if anyone of you have a much better idea on how to do this please let me know.

I use SWAG to publish things and it contains GeoLite2.

Swag info here: https://docs.linuxserver.io/general/swag

And here: https://github.com/linuxserver/docker-swag