@ADB-UK - eviltoast
  • 0 Posts
  • 12 Comments
Joined 11 months ago
cake
Cake day: October 18th, 2023

help-circle



  • You are talking about a manual watchdog timer system. There are low cost and free systems to do things like this - a search for network and application monitors will turn them up.

    Its way better to try to address why the core program dies that patch around it this way but as that’s not always easy (or cost effective if the code is out of maintenance) then just create a small program that checks if the core app is running and restart it if its not. This can be run from the system scheduler every few minutes.

    If you have no way to tell the program has died (other than users shouting) then you could look to send an email to a mailbox that’s monitored by a background program and restart when it gets one.

    Another way is to create a simple web page that is hosted on a box and use that to trigger the reset.






  • Which ntfs software are you using?

    IIRC there are three options now (inc one in the kernel that’s supposed to be a bit rough still) but the most stable seems to be the older fuse option of ntfs-3g.

    I moved to getting none Linux boxes reading Ext4 drives using https://www.paragon-software.com/ drivers.

    Have you tried using wsl mount on Windows to access Ext drives (may depend on your Windows version)…

    Bit baffled by u/ajnozari comment on share security issues - SMB via SAMBA is well documented as to how to set things up…


  • IIRC Getting the LetsEncrypt certificate for NGINX Reverse Proxy requires direct access to the web site on port 80 - you are behind CGNAT and stuffed…

    Possibly have a look at Cloudflare tunnel (Cloudflared in Docker) - this gives you http / https access with certificates. I used these instructions and it took less than an hour to get up and running https://www.crosstalksolutions.com/cloudflare-tunnel-easy-setup/ Note my TTL on the domain was set low to speed up transfer of name servers.

    This also lets me access the sites directly using the full DNS entry even though my router does not handle hair pinning - no need for a local DNS server anymore.

    Note the above are slightly out of date to the screen layout but in principal they work fine.

    There is a small security concern - Cloudflare can intercept all traffic (even to/from https sites) internally - that does not worry me but your use case (or principals) may differ :-)