Do note: this might break a lot of websites people go to. I used NextDNS for my router and a family member couldn’t get to shopping websites like Hot Topic or Uniqlo. They straight up block you.

I gave up and put ISP dns bavk and just use Unbound on the router + enable NextDNS on Individual devices.

I love Unbound bro. Gives a neat list of the noisest domains which I can quickly add to my list if I don’t need that site 😌

Side note: I just tried switching to KeePassXC and it seems pretty fine, except for one caveat. If you installed your browser (probs FF or Librewolf) through flatpak or snap on Linux, the browser extension will not work.

I had to change to the non-Flatpak ver of Librewolf on my Fedora PC, which sucked a little lol 😅

In my state it’s mandatory to learn it before you graduate HS. Now, I should actually take the time to review cause I wouldn’t be ready to help a person…

Idk if Wholphin will fully fit your needs, but that’s what I use on my FireTV and we love it. It looks sleek as hell and has sone plugins like Serr requests. Weirdly though, it takes longer to load an ep on there compared to my laptop or phone.

I’m not too worried about lack of tls/https for my websites rn, I just want to get working concept lol.

But thanks for the caddyfile, although I’m not sure I can use it since OPNsense seems to like to auto generate the config based on the settings in the UI.

I’ve narrowed down my issue a little more with the help of frongt@lemmy.zip, and I’ve established that:

Pinging immich.homelab.internal gets a response from the correct IP. When typing http://immich.homelab.internal/ or http://immich.homelab.internal:2283/ in browser I get an ERR_NAME_NOT_RESOLVED page.

If I curl http://immich.homelab.internal/, I get: curl: (7) Failed to connect to immich.homelab.internal port 80 after 6 ms: Could not connect to server

If I curl http://immich.homelab.internal:2283/, I do get the html of the site at least.

Through some digging through other people’s forum posts, I made sure to turn off https redirects (auto_https disable_redirects).

I definitely know that it’s failing because Caddy isn’t redirecting my services from port 80 to their upstream port (2283, 8006, etc.), but I don’t know why it won’t redirect, even when looking at logs…

Sorry, I didn’t specify in my original post but I did plan to use .internal for my domains. And I never planned to open my ports on my firewall either so that’s good to know. But I’m still having issues despite this…

Here’s my Caddyfile:

# DO NOT EDIT THIS FILE -- OPNsense auto-generated file


# caddy_user=root

# Global Options
{
	log {
		output net unixgram//var/run/caddy/log.sock {
		}
		format json {
			time_format rfc3339
		}
	}

	servers {
		protocols h1 h2
	}

	email [redacted]
	grace_period 10s
	skip_install_trust
	import /usr/local/etc/caddy/caddy.d/*.global
}

# Reverse Proxy Configuration


immich.homelab.internal {
	handle {
		reverse_proxy 192.168.10.247:2283 {
		}
	}
}

import /usr/local/etc/caddy/caddy.d/*.conf

Here’s my firewall config (I allowed any source IP to Destination “This Firewall” & port 443/80 on my LAN/VLANs):

Here’s my Caddy configs:

And I did make a wildcard domain override (*.homelab.internal) in Unbound with this config:

Host = *
Domain = homelab.internal
Type = IPv4
IP = 192.168.10.247

I can ping my server’s IP, nslookup the homelab.internal domain, and ping homelab.internal. So the regular DNS entry is working, I just can’t get my reverse proxy to work…

Huh, just checked settings and I see that you can add SSIDs to a radio. Awesome, thanks!

But I think I have to add, that I use the openwrt machine just as dumb access point behind a opnsense box.

Ooh, can you go more into that? i have Opnsense as my router and this AP is just supposed to act as a WAP. I was struggling to figure out how to have it pull dhcp from the router and not to configure it on the WAP itself. That and DNS too, if the DNS isn’t configured on the interface then I get no internet access.

What hardware do you recommend?

Tbh I just picked something that was in their list of supported hardware that also operated with the Wifi bands I needed and had a good amount of Flash and RAM. Try to take the time to research what wifi drivers suck, such as Broadcomm. Mine is a Qualcomm, I got the Linksys MX5300 Velop Mesh, and now that I got my 3 wifi VLANs set it seems pretty nice. Haven’t gotten to use it much though so we’ll see, but I’m excited.

I do recommend checking how many radios it has because I was maybe considering having my Smart TV on it’s own VLAN but I don’t have enough radios for that. Maybe I’ll put it on the IoT VLAN.

Are there any that are smart enough for a SMB setting where the APs all scan other networks and then talk to each other and set their own channels and power levels to optimize WiFi traffic with minimal channel or power overlap?

Sorry, I don’t know anything about this 😅 You’d have to research this.

Misskey/Sharkey being similar to Pinterest??? Has Pinterest changed that much in about 4 years, cause that’s when I last used it (ads ad AI art chased me off)

Miss/Sharkey is more like Twitter but if it was pretty/customizable and with a pinch of overstimulation imo. The JP origins is what gives it the overstimulation (the reaction emotes, oh my god…)

I don’t really think any popular Fedi platform is similar to Pinterest tbh.