ZeroTier (with Flow rules) + RDP is how I solved this for my clients.
Can you make a guide I'd be interested in that read.

I wrote this a long time ago. It was to run on my EdgeRouter but I also mention how you can use it with another internal device.

https://hooks.technology/2017/08/dyanmic-dns-with-cloudflare/

Obviously this assumes you're using Cloudflare.

@BraswellJay said in iperf results wired vs wireless ...:

Am I wrong in thinking that the difference shouldn't be that great?

The expectation is that the difference will be huge in most cases.

@black3dynamite said in Sangoma opened a Jitsi meet server also:

With these common meet.domain.com setups, I wonder if there's a way to do a query of domains that starts with meet?

Not easily, no.

@openit said in Factors to consider while choosing or planning for cloud backup solution?:

@scottalanmiller @JaredBusch
If you people are around 🙂

A bit busy 🙂 Actual work and stuff 😉

@Obsolesce said in How can I scale an image in a Hugo page:

@JaredBusch said in How can I scale an image in a Hugo page:

@Obsolesce said in How can I scale an image in a Hugo page:

@JaredBusch said in How can I scale an image in a Hugo page:

@Pete-S said in How can I scale an image in a Hugo page:

Just an observation but I wonder what the "shortcode" is short for, when it's basically exactly the same as html?

Here is an example.

This:
3429c115-f083-4813-91c3-477cf458eb34-image.png

Results in this:
cfd058dc-d189-4d81-9f19-3926facb7d76-image.png

So "This:" is the about.md file, where you have both the html img line and shortcode?

Oh, FFS. The image tag was only there to show him what happens to HTML. Pay attention.

Yeah, I figured. Nothing wrong with verifying something that looks contradicting, though. There's not enough of that around here tbh, too much assumption.

Okay, I’ll give you that.

@Emad-R said in 5G Dangers & Reality - Theoria Apophasis:

Youtube Video

Lmao!
This guy obviously ran out of tin foil.

280489e1-31b1-4fe8-a12d-36e8d5a73d48-image.png

@rtfm said in ESXi cluster, advice needed:

BTW your comment about how "system integrators" try to sell bare metal and certifications instead of brains was more than appropriate!

It's where all the money is. As a consultancy... I can sell you a full IT department for a year. But I have to pay those people and my profits are small, but they can provide you with a wealth of work, advice, etc. building, maintaining, and supporting whatever you need.

But for the same money, I could just sell you a product that you don't need, that sounds good but doesn't do a good job for you, and earn easily triple the profits because I don't need to pay staff.

So the challenge is, if I resell those products, how do I make myself "do the right thing" when the customer is literally paying me only if I screw them over? The customer effectively demands, through how they pay and choose solutions, to only get the bad solutions. As a company, it's all but impossible to resist selling the product because the customer never knows the difference, and you earn so much more money as a salesperson than in provided sound IT. That's why companies like NTG and Bundy Associates simply don't sell any product at all, so that that incentive to do so isn't there at all. Because if it was, it's all but irresistable.

That did it.

Putting the [] around the file name made it all work right.

@Pete-S said in Does intra-VM traffic leave the host?:

@scottalanmiller said in Does intra-VM traffic leave the host?:

What's the use case here? Maybe there is another approach that would be effective?

Mostly isolate and allow some well know traffic on appliance type VMs and VMs that we don't admin - without having to put each workload in it's own subnet.

Hmmm... I see why you might want it.

@Dashrender said in Soft Phone issues:

HP sure in the heck isn't local in Omaha, they hire contractors to go to businesses to replace motherboards, etc for the onsite component.

NTG got much of its early business being those "local" guys for HPE, Dell, etc.

And funny enough... even being the "local guy" meant that our Rochester, NY guys covered like eight states. When those big companies are sending their "local guy", they are driving hundreds of miles much of the time unless you are in a huge city.

@jmoore said in Large File Sharing:

@Romo said in Large File Sharing:

@dave_c Lucid link seems to be super interesting really.

I looked at that and it seems really nice.

We have been talking about testing it with a client.

@WLS-ITGuy said in Aastra phone replacement:

I don't see a firmware for the T54W nor is the EXP50 available.

These phones are basically new since October or so. They will not be in EPM anytime soon because of how that has traditionally worked. The device manufacturer has to sing an agreement with Sangoma (Schmoozecom) to get a device supported. I assume, but do not know for a fact, that the agrement includes monetary compensation also, as anything in EPM is fully tested by Sangoma also, and testing takes manpower (money).

@krzykat said in How may of you own your IT business and have more than a handful of employees?:

@scottalanmiller

I think you need to have mitigation plans for key man not just for the longevity of your company and your heirs, but I've been asked more than a couple of times if we have plans in effect in case God forbid, that I catch this and fall over. Yes - its very important for employees and clients that you have a proper succession plan in place and I've had some conversations about that already in light of what all is going on. Then realized, I should have done this long ago ... what happens if I get hit by a car crossing the road ... things need to proceed and a plan needs to be in place.

Romo is my key man replacement. He'd need to hire more people to assist with capacity problems, but key functionality would not be disrupted.

OK - JB to the rescue again.

He saw I was marking my allowed IPs as Local - FreePBX doesn't know the 4445 service, so it's not allowed to be part of Local as far as the firewall is concerned.

So two options exist -

mark allowed IPs as Trusted, not Local create a custom service under the firewall, and set it as a local service, then IPs marked as Local will get access.

Thanks @JaredBusch

I don't really use them. I have 3 monitors though. they have been around forever it seems but limited use for me. I do it occasionally but not really out of necessity.

@JaredBusch said in Any good getting started with Hugo resources:

@stacksofplates said in Any good getting started with Hugo resources:

cp -R themes/theme/examplesite/* .

Why do this? Why can't I just create my own things? Why bring everything from the example up?

I don't mind this, just trying to understand the logic.

Each theme has it's own specific settings. The example gives you all of those settings without having to read through all of their theme and find the settings for yourself. You can delete the files in content/ that you don't need. It's just a way to show you how to use the theme and give you a default config.toml.

@scottalanmiller said in Mattermost Behind Nginx and Cloudflare Script Load Error:

@Pete-S said in Mattermost Behind Nginx and Cloudflare Script Load Error:

@scottalanmiller said in Mattermost Behind Nginx and Cloudflare Script Load Error:

@black3dynamite said in Mattermost Behind Nginx and Cloudflare Script Load Error:

s your setup is Cloudflare proxy -> Nginx proxy -> apache (mattermost)?

CF Proxy > Nginx Proxy > Mattermost (MM is its own server)

And yes, if I disable the CF Proxy, it works.

Why the double reverse proxies?

That's the standard. You are always expected to have your node.js servers behind a reverse proxy. And CloudFlare is the CDN cache in front. This is the universal standard for all web servers. Plenty of times to avoid it, of course, but this is the baseline system design.

In this case, MM is a raw node server so has none of the protections or handling of a system like Nginx. Nginx also provides the ability to have multiple sites behind one IP address. MM doesn't do that on its own, nor does CloudFlare. No different than how MangoLassi is on NodeBB, also a node platform, behind Nginx, behind CloudFlare.

CF can't do the details port and IP handling, Nginx can't do the globally distributed cache.

Thanks for the clarification Scott. I (wrongly) thought that Cloudflare was a full featured proxy and could do the same job as haproxy, nginx etc.

What about using Ghost? I started with it before moving to Wordpress. It is completely markdown if I remember right. I liked it but didn't feel the plugin availability was there.