Misunderstanding aside, thanks for the link!

It’s 3.6GB upload though, which doesn’t make much sense for a firmware update. The download usage was 96MB. But I agree that’s it’s probably something failing and retrying.

My Mikrotik routers and switches also reboot in seconds (even for upgrades), which I’ve never seen consumer gear do!

Even my Ubiquiti switches seem to take a minute or so to start forwarding traffic after a reboot; whilst my Mikrotik switches reboot faster than any of my unmanaged switches start up.

Cloudflare usually blocks ‘unknown’ bots, which are basically bots that aren’t search crawlers. Also I’ve got Cloudflare setup to challenge requests for .zip, .tar.gz, or .bundle files, so that it doesn’t affect anyone unless they download from their browser.

There’s also probably a way to configure something similar in Anubis, if you don’t like a middleman snooping your requests.

I just used a bot to read it: https://web.archive.org/web/20250901133211/https://cheapskatesguide.org/articles/debian-netinstall-waf.html

It shouldn’t be because you’re not actually the owner of the IP address. If any user could get a cert, they could impersonate any other.

They’re ‘shortlived’ 7 day certs, verified using a HTTP challenge. It doesn’t matter who owns the IP, it’s just a matter of who holds the IP.

Cert pinning is pretty uncommon in the self hosting community though, especially when both Cloudflare and Let’s Encrypt have a 90 day validity period and often renews after 60 days.

Uhh, this might be true for WebRTC, except not much uses WebRTC other than for realtime streaming/calling. Jellyfin for example is just an mp4 stream over http; and http(s) will only use the IP in the DNS record. I’d like to see a packet capture if you are certain something is switching IP.

Yeah, YunoHost explains why http://localhost:8536/ wouldn’t be working. If cloudflared and Lemmy are in separate containers you have to put an actual IP in, since localhost points to the container itself.

How are you accessing it without Cloudflare? How do you know that Lemmy is actually listening?

What’s the URL you using to access it without Cloudflare?

Edit: Also that curl tells me it’s not listening on that IP/port.

Can you access it without Cloudflare?

Does curl http://localhost:8536/ work?

You are using cloudflared right? Because normal (non-cloudflared) Cloudflare doesn’t support port 8536.

With dynamic DNS? Yeah it always has, as long as you can host a http server.

With a dynamic IP? It should do, the certs are only valid for 6 days for that reason.

I know this seems pretty much solved, but I just wanted to point out:

Frigate doesn’t need a TPU, OpenVINO is quite performant even on decade old Haswells, or if you’ve got a GTX 750 or higher you might be able to use that as well.

No it’s real! I can’t verify the exact rating since it OL’s my meter, but with some circuitry it can power my Pi for a few minutes. I got them from element14, so it’s unlikely to be a fake product.

You can host a page with an iframe, but you can’t directly change the DNS record to point to something that isn’t GitHub.

Guys you’re not gonna believe this:

Thanks TIL! Although I prefer this diagram that has all the wifi channels on it, instead of just the 3 common ones.

Source

Perhaps there was an easier lighter-weight way of doing this?

Yeah, SSH tunneling. What I would do (and have done in the past) is something like:

ssh -L 8080:192.168.0.1:80 myserver

That will forward port 8080 on your host to port 80 on 192.168.0.1, so you can access your router’s web UI with http://localhost:8080/ in your own web browser.

You can also setup full tunneling with SSH, but that requires messing around with SOCKS and I usually can’t be bothered.

Ahh sorry, I thought you meant you plugged it into the input side. If that’s the case then are you running anything that measures CPU usage? I run the TIG stack, it might be able to give you some hits. Also back to my original point which is already unlikely, if it’s a modified sinewave UPS, it can confuse some measuring devices while it’s on battery.