There always seems to be another one!

That's awesome! When I tried, I got a message that the trial was full. I only tried a few times this year, but I couldn't get the app. I hope it's as good as the android version.

It works great. The user that cloud init creates has sudo privileges and it prevents log in from root, the only known user that has all privileges on a Linux system. If you disable ssh password login and add ssh keys to cloud init, you can stamp out a relatively secure fleet of VMs in minutes.

@@hardwoodhomelab working on the perfect setup for me. btw try this for deleting the temp user. deluser --remove-home temp

That's a tough one. Every router does port forwarding differently. I hate telling you to google your router model for directions, but that's probably the best thing to do. If you keep having trouble, you can email me and I'll do my best to help you.

Thanks for the great suggestion. I hope this is what you were looking for.

@hardwoodhomelab yeap thnx for this Do you have a email i want to add you on there

?

I don't have a public email yet. I am using the comment section for now. I'll let you know when that changes.

@@hardwoodhomelab what about a signal ?

I'm glad you liked it. It is was fun to make. I only wish my screen recorder worked.

That's a good idea. Thank you.

@@hardwoodhomelab yeah i will wait for this tutorial 👍 Have a nice day 😊

Good call! I am rather embarrassed. I'm still learning to talk and type, and I'm afraid I misspoke. Absolutely the public key. Thanks for catching that.

I like what Forgejo stands for and it is on my list. The only reason I did Gitea first, is that I've been using it for a couple years and it's really good. Thanks for the input.

I was about to comment this. I was also a Gitea user for several years, and it runs just great. I have no complaints whatsoever, but it's recent policy change made me reconsider moving into Forgejo while they were still compatible with each other and you could migrate quite easily.

Glad I could help!

Thanks for telling me you like the video. I've been trying to keep the music volume to barely audible when I'm talking in the video. Either my editing software, my sound system or my hearing, is failing me. "Proper" networking is such a subjective thing. Make sure that it works for you. I only recommend that you don't expose anything to the public internet you don't have to. But most importantly, have fun. Learning doesn't always have to be hard work.

Thank you. This will be my new format from now on. I can't thank you and the others enough for pointing me in a better direction.

Also, would enjoy a video explaining your strategy for cname records, security certificates, etc.

It's great that you found this useful. It truly is one of my favorite apps. That is great advice for the music. I'm going to try that on my next one.

Do you mean preparing for a security certificate? Like CompTIA Security + or something similar?

Okay. Thank you. I will strip the music and repost. No more music. I appreciate you saying so.

Yeah. I messed up the music pretty good. Have you watched my latest video? I turned the music way down. I'm wondering if I need to drop it all together?

For concentration I personally would remove the music.

I started PiHole and set up the DNS record for pihole to resolve to the docker virtual machine IP. Then, I changed the port that the pihole webUI runs on. After starting NPM, I set a new host to redirect to the port that PiHole is running on. If that is hard to follow it show the whole process in this video kzbin.info/www/bejne/noe5anWkebNmZpI

I've been meaning to try tailscale. I was going to try it for this video, but I was mildy irritated with their use of identity providers. I still plan to try it, with Headscale running on a VPS. Thanks for the like, it means a lot.

@@hardwoodhomelabgreat video! Please do the video with Headscale! It’s a great tutorial and looking forward to it. Thanks!

It's on my list. I'll definately show my results.

@@hardwoodhomelabwe can’t wait to see it and keep up with the good work 🎉

I've never tried wildcard dns in my lab. I might have to switch to adgaurd to try that out. Thanks for the suggestion.

@@hardwoodhomelab code-server exposes each port on a subdomain like 8080.vscode.fqdn and I didn't want to manually add like 10000 lines to the file in pihole

It makes sense. It's something I have tried to do on both pfsense and pihole. Neither support it.

It's definitely permissions on my nfs. I just can't figure out how to fix them. I set the nfs share directory to 777 permissions and it still doesn't work. I need to learn more about NFS.

It was simple enough to do. I have small channel and I can respond to these things easily enough. If you don't mind me asking, which did you prefer?

@@hardwoodhomelab i prefer the one with no music but that will depend for other

I have used a couple of your videos for things in my homelab. I didn't need this video, but came to watch specifically because it said no music and I wanted to feed the algorithm. I always found the music too loud and distracting. Some music in intros, transitions, w/ever... But music off while teacher is talking lol

Definitely the one with no music. Thanks for the video!

I truly appreciate the input. I turned the music way down in this video kzbin.info/www/bejne/Z4qplJivatKBeac I'd love to know if it's still distracting. If it is, I'm just going to scrap the music from here on.

Thanks! I hope you got something from it.

Sorry about that. I've been struggling to find a good balance on the audio. kzbin.info/www/bejne/noe5anWkebNmZpI Just for you my friend.

It is a real time saver. Have fun creating ready to use VM's in seconds.

I'm not sure I understand what you are asking. It sounds to me like you want to expose your file server to the internet so that you can access it outside of your home. If that's what you want, I would recommend using a VPN (not a paid privacy VPN) to access your home server. I have used zeroteir in the past, it's a great service. I've also read that tailscale is just as good, if not better. Both of these will allow you to access your server outside of your home network, without changing any firewall settings and without exposing your server to the wild Internet(not recommended). But no, Pi-Hole will not help you expose anything outside your home network. If you are interested, I can show you how I would set it up.

I made this video to show you how I would set up a file server on raspberry pi. I think you'll enjoy it. kzbin.info/www/bejne/Z4qplJivatKBeac

I'm glad you found it helpful. An old laptop is a great starting place for a homelab.

It's really pretty simple to set up a dns record in cloudflare. It's tougher to set up the port forwarding required in your router. I can show you how the dns record works, but I won't be able to show how to expose your jellyfin to the web. But if you are truly interested I'd be happy to show you how I set it up.

Some people's router can't port forwarding. Look at cloudflare tunnels or tailscale vpn setup

I show the dns on cloudflare in this video kzbin.info/www/bejne/Z4qplJivatKBeac

For my lab I set up the DNS locally. I use Pi-hole for DNS on my home network (it'll be my next video). Unless you are planning to expose your service to the public internet there is no need to have any records on cloudflare.

@@hardwoodhomelab Thanks, I understand.

In this video I show the set up on cloudflare kzbin.info/www/bejne/Z4qplJivatKBeac

Yes. Cloud-init adds the created user to the sudo group. This method of disabling root is not perfect. I have had to enable the root shell for some tasks, sudo -i for example, but I haven't yet found a better way.

If you are creating a template like this, the root user should be disabled by modifying the /etc/shadow file not the /etc/passwd. There is a password hash in there that should be replaced with !* and will disable root without inhibiting sudo privileges. I made an updated video but it's not worth watching if you have followed along with this. Sorry for not getting it right the first time.

It's true. I didn't realize my screen recording wasn't grabbing the whole screen. I'll try to do better.