💾 Archived View for laniakea.rodoste.de › journal › 2023-01-26-flu.gmi captured on 2023-04-26 at 13:15:44. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2023-04-19)
-=-=-=-=-=-=-
2023-01-26
Oh the joys. I felt the first symptoms of coming down with something on Monday. Somehow I coughed and struggled through a four hour workshop that had already been postponed a few times and pretty much collapsed into bed immediately after dinner. You know, man-flu.
Seriously though, this is the third time in a couple of months that I have fallen sick. I do think that generally speaking I do take care of myself, but the situation at work is getting to me more and more. I neglected the first two outbreaks and went back to work relatively fast. This time hopefully I'm smart enough to take some rest.
So far I'm proud of myself. I sleep _a lot_.
I've spent my waking hours reading “The Ecotechnic Future” by John Michael Greer. Good read, but depressing. Which is why it is important I read it. The book discusses visions for how our industrial civilization will change in a world after peak-oil. It is scary, but it also highlights very well how the current system is unsustainable.
Is anyone else also tired of the common misuse of this word, "sustainable"? Well there is no helping it, actual sustainability is non-negotiable.
I'll bring the book up again in a later post. Today I'm about a third through and it feels premature to talk about it.
What else have I been up to… mostly bashing my head against IPTABLES. :(
In my selfhosting setup I'm providing a few apps to myself and my wife: A wiki, a taskboard, RSS reader, data synchronization, ad-blocker. They're all accessible from within our appartment. But I want to be able to access them from anywhere, but without exposing them to the internet.
I'm already hosting a VPN network for us which is working well. So the idea is to provide the selfhosted apps on the VPN by means of clever routing and a reverse proxy.
The task for now is to forward DNS requests to our adblocker: From the wireguard VPN network to the adguard instance which shares a docker network with the wireguard client on our gateway machine that provides the single access point from the outside world into our LAN.
┏━━━━━━━━━━━━━━━━━━━━━┓ ┏━━━━━━━━━━━━━━━━━━━━┓
┃ LAN client ┃ ┃ mobile client ┃
┃ eth0: 192.168.0.238 ┃ ┃ eth0: * ┃
┃ wg0 : 10.42.78.100 ┠┄┄┄╮ ╭┄┄┄┨ wg0 : 10.42.78.150 ┃
┃ DNS : 10.42.78.200 ┃ ┊ ┊ ┃ DNS : 10.42.78.200 ┃
┗━━━━━━━━━━━━━━━━━━━━━┛ ┊ ┊ ┗━━━━━━━━━━━━━━━━━━━━┛
┊ ┊
┏━━━━━━━━━━━┷━━┷━━━━━━━━━┓
┃ VPS / wireguard server ┃
┃ eth0: (VPS) ┃
┃ wg0 : 10.42.78.1 ┃
┗━━━━━━━━━━━━━━┯━━━━━━━━━┛
┊
┏━━━━━━━━━━━━━━━━━━━━━━━━━┓ ┊
┃ machine A ┃ ┊
┃ eth0: 192.168.0.45 ┃ ┊
┃ wg0 : - ┃ ┊
┃ dn-wg: 172.20.0.0/24 ┃ ┊
┃ ┃ ┊
┃ ┌───────────────────┐ ┃ ┊
┃ │ docker wireguard │ ┃ ┊
┃ │ wg0: 10.42.78.200 ├┄┄┄╂┄┄╯
┃ │ eth0: 172.20.0.2 ├┄╮ ┃
┃ └───────────────────┘ ┊ ┃
┃ ┊ ┃
┃ ┌───────────────────┐ ┊ ┃
┃ │ docker adguard │ ┊ ┃
┃ │ eth0: 172.20.0.3 ├┄╯ ┃
┃ └───────────────────┘ ┃
┗━━━━━━━━━━━━━━━━━━━━━━━━━┛
by the way, UTF-8 border characters are awesome
But man, IPTABLES are hard. I know only very little about networking itself so writing these rules is more guesswork than anything else. I've been reading loads of documentation and asked for help on reddit but so far I'm not really making progress. It is frustrating. I've been at this for a couple of weeks now. Granted, usually I have an hour of consecutive time and a complex subject like this isn't really suitable for that. Now that I'm down with the flu I do have more time but my brain is in power saving mode so it's not any easier.
----