• 0 Posts
  • 28 Comments
Joined 11 months ago
cake
Cake day: October 16th, 2023

help-circle
  • “Shared network folder” in Jellyfin doesn’t do what you think it does. 😛 I agree it’s rather confusing. It’s just a convenient link to a Windows share which you can open from the Jellyfin app if you want to browse the files and they happen to also be shared as a Windows share. It’s NOT where Jellyfin takes the files from.

    Jellyfin can only index files accessible to it locally. Share the files from TrueNAS to the machine or container running Jellyfin, then point Jellyfin to the directory where you mounted the share. I recommend NFS rather than Samba for this purpose.


  • What does “mediaserver” mean to you? Synology are good for storage but not so great for more CPU intensive stuff, plus of course they’re not freely upgradeable and you’re tied to their OS.

    If you’re comfortable building your own PC you can install Unraid or TrueNAS which will give you an easy to use admin interface and the ability to use/upgrade with off-the-shelf components. /r/buildapc can probably help with that.

    If you’re also comfortable with Linux you can design your own fine-grained approach to the OS and the apps on it, /r/selfhosted can probably help with that.

    SSD’s are getting there in $$$/TB but have a bit more to go to catch up to HDDs.

    Your approach of having multiple backup drives is sound. Having everything in one place means all eggs in one basket. Keep that in mind when you reorganize your data.


  • Same, except I also use Scrutiny to flag drives for my attention. It makes educated guesses for a pass/fail mark, using analysis of vendor-specific interpretations of SMART values, matched against the failure thresholds from the BackBlaze survey. It can tell you things like “the current value for the Command Timeout attribute for this drive falls into the 1-10% bracket of probability of failure according to BackBlaze”.

    It helps me to plan ahead. If for example I have 3 drives that Scrutiny says “smell funny” it would be nice if I had 2-3 spares on hand rather than just 1. Or if two of those drives happen to be together in a 2-pair mirror perhaps I can swap one somewhere else.





  • I’m partial to the DIY PC option because it allows far more flexibility. If you can swing the space for the larger box IMO it’s the best way to go.

    Some things to keep in mind when speccing the box:

    • Some PCIe slots can come in extremely handy down the line. There’s an amazing variety of expansion cards that can save your butt when you decide to do something you haven’t foreseen.
    • Consider how many HDDs you’d like to have. This will determine the case size as well as how many SATA connectors you need to get.
    • Get an Intel CPU at least gen6 because they have GPU with hardware transcoding built-in.
    • Get at least one M.2 slot, to be able to install the OS on a NVMe SSD and not take up a SATA connector. Read the motherboard specs though, some of them disable a SATA connector anyway if you use the M.2 slots in a certain way.
    • You can run a server on RAM as low as 4 GB. You actually don’t need very high RAM if you don’t intend to run VMs or ZFS.

    Are you familiar with any Linux distro in particular? I would strongly recommend using Docker rather than native regardless of distro.







  • To give you some context, GoDaddy email is actually Outlook 365 (now Microsoft 365), which is normally $99/year but GoDaddy slap a higher price on it.

    If you were knowledgeable about Outlook admin/Azure you could simply disconnect your Microsoft Outlook tenant from GoDaddy and stop your subscription.

    Since you’re not, you can use BitTitan.com to help you migrate, it’s $12/user and you can ask their sales support to help with all the gory details. Basically you make a new account on whatever service you want and they get all your mail over. Make sure that the new service you get can hold all your mail (has enough space) and also has 4 mailboxes – BitTitan moves your email but getting the right service is on you.

    If you’re ok using Outlook and Exchange you can ask BitTitan to move you to another Microsoft 365 account, which as I said is $99/year for a family account of up to 6 users.

    If you want you can also shop around for regular IMAP (non-Exchange) providers, which will let you use a wider range of mail apps, and ask BitTitan to move you to one of them. But keep in mind that most providers charge $3-5/user/month, which for 4 users adds up to something similar to what you’re paying now, or more. One notable alternative is Migadu.com’s Mini plan, $90/year with no user limits, but you all have to share 30 GB of storage space. MXroute.com is another option, they offer more space for cheaper, same deal (no user limits, y’all share the same storage space). Personally I prefer Migadu for my family because their control panel has more features, they’re hosted in the EU which for me makes more sense, and they’re a company rather than a one guy operation; but if you need more space MXroute is perfectly fine too.



  • If it’s in the range 100.64.0.0 – 100.127.255.255 then yes it’s CGNAT.

    Often an ISP offers some way to bypass CGNAT. It can be a dynamic public IP, it can be a static public IP, it can be a dynamic DNS service (a public domain name they keep synced to a public dynamic IP). But the cost of that service may be too big.

    If there’s no way (or too expensive) for the ISP to allow bypass, you can use Cloudflare tunnels or Tailscale funnels. They’re both free but there are pros and cons to each of them. Cloudflare requires you to use a domain and to use their own DNS service in order to use their tunnels, and they don’t allow media streaming through them. Tailscale doesn’t care what you use them for but you have to use a domain allocated by them.




  • Certificate transparency logs play a vital role so you can’t remove any information from it. They let everybody (including you) verify that the certificates are genuine, and they keep certificate authorities honest.

    If the part that’s bothering you is that your subdomains are known, the solution is to get wildcard certs then replace all the former subdomains with new ones that don’t appear in the log.

    If the part that’s bothering you is simply that old domain names are still resolved, the trick is to not get wildcard DNS records. The certs should be issued for a wildcard (*.domain.tld) but the actual subdomains should be defined explicitly (CNAME example.domain.tld -> domain.tld but not CNAME *.domain.tld -> domain.tld); otherwise all the previously defined subdomains will keep working.

    I think most of us have been through this, myself included. Not only did I define subdomains before learning about logs and wildcards, I also had domains that were used at some point with freedns.afraid.org and had random people issue certs for various subdomains, and all of that is now in the transparency logs.