My pleasure!

Now it should become easier...

Thank you. So far I have no plans to stop...

Thank you for your nice words!

You are welcome! I create my videos as if they were made for me ;-)

Glad you liked it!

Glad it worked. Thanks for the feedback!

Glad you think so!

Glad it helped!

Do not forget my new IC-7300 sitting in my newly created "radio room". I already had contacts to more than 50 countries all over the world :-) A lot of side-projects...

He probably has hidden the docker container with the answering module ;-)

What band(s) do you focus on Andreas?

@@AndreasSpiess Where do you find the time?

@Jim: Mainly FT8. All "traditional bands (80/40/20/15) @Richard: Good question...

This is new to me. Thanks for the alert.

Is it real?

@@FikiFirmansyah Multiple sources and I got an email. Google .. google photos 1 June 2021

@@FikiFirmansyah Yes, asli

this is also new to me, its getting a crazy world of greed

Good to know that it worked. I think the new menu still has some issues and will take some time. Happy new Year to you, too!

My pleasure!

It also should work for a PC.

You are welcome!

You are welcome!

You are welcome!

It is really interesting what can be built with this cheap technology!

Glad you like them!

Sehr gut. Danke für das Feedback.

You are welcome!

You are right I deleted the whole installation on the Pi ;-) And the DuckDNS domain is also free again for somebody else.

Danke!

:-)

And I don't know English very well

It even should have Spanish subtitles.

@@AndreasSpiess yes. I did not know

Thank you!

Docker is only the infrastructure. What people prepare for others is also very important.

@@AndreasSpiess Indeed that. Fortunately the open source community has gotten much better about it in the last few years. Chalk it up to corporate sponsors, perhaps, but I'll take it.

You're welcome!

Dave was one of the first UKpostsrs I watched, you are right!

@@AndreasSpiess Yeah, and me! I like the sense of community, hearing UKpostsrs mention each other; yourself, BigClive, Dave, Jonathan Oxer from Superhouse (and some I've forgotten to mention) - you've all been my mentors and helped me with a lot of Home Automation (and other) stuff. Thanks guys!!

Never heard of dockstar. Thanks for the link. Looks very similar, you are right. It looks like it is more flexible and less predefined.

My pleasure!

Thank you for your nice words!

I often listen on the Redit DMR Talkgroup (HB9BLA)

@@AndreasSpiess cool. I use to talk on the 147.435 repeater on Santiago peak in california witch was a naughty repeater. Now that I live in kingman az. Iam waiting for my first dmr radio from bridge comm, even though I have been a ham sence 2006. Cause there was a plethora of repeaters in california. Iam learning as much as I can about sdr/rtl and other radio platforms and I have a long long way to go. Just so I can get back on the winsystem or the papa system. Or link up to one of the many dmr talk groups , I also want to build an allstar VoIP witch i know is older analog but i like the clear sound of analog. Iam taking notes on hex codes decoded through frame rates and etc and learning about emmerse- satsatellites. Agin i have a lot of note taking to go, memorizing and learning to go before I feel confident about my capabilities.

@@AndreasSpiess I just realized that was your callsign. I looked you up on qrz.com. iam such a dunce.

@@AndreasSpiess iam waiting on my new callsign to show up in the fcc url. So I can get a dmr I'd. My old callsign was ki6gvx. I let my licence elapse. So I had to retake the element 2.

DMR and Brandmeister currently are a good way to go. With an Anytone radio or so. I use a Hotspot in my basement.

Thank you for your tips! A few of the tips are probably more for the builder of the NextCloud container. At least I would expect that they optimize the setup. The speed with my Pi4 and an SSD was ok for me. I can imagine that the USB2 of the older models can create a bottleneck.

You are for sure right about the number of software running on the VPN server. Of course you can run the Wireguard machine in the DMZ if you know how to set it up. If I believe some stories (cameras, etc.) what people do, the solution presented here is already quite safe compared to just opening ports. I also ask myself: Why would somebody attach an ordinary household with a zero-day vulnerability. I would assume there are more rewarding targets. My standard router seems to have the possibility to only forward one port. I also read "DMZ" somewhere. Maybe I investigate a little in this direction.

@@AndreasSpiess I agree that this solution is relatively safe. The threat is real though. Cyber criminals are just looking for resources. If your devices are compromised they can become part of a botnet which are often used to hold companies for ransom with DDOS attacks. Also, it is not someone targeting you. Cyber criminals use automation to find vulnerabilities around the world, for various purposes. Think of it as scouts, software bots that go looking for openings. Depending on what is found and reported back, specific actions will be taken. No human is directly involved. Zero days simply mean it is not a matter if you will be compromised, but when.

Maybe. I decided to stay in the cloud with my collaborations because of security.

You're welcome

Thank you for the info!

Thank you!

You have other things to do now in you nice weather... Here it is quite cold and long nights.

Yes

My router provided by the ISP does not offer VPN. But I cannot speak of all other ISPs here. Using the router is of course also a good way to get secure access. For sure it is easier. As you mention, I also wanted to avoid the cloud. But for the moment it seems it is easier to keep it for file sharing.

You are right. I decided to continue to use dropbox and google for that purpose. As a UKpostsr I feel a little less secure :-(

I do not know snap. Docker is very good for such porposes.

Thanks for the link to syncthing! Concerning the ESP32: I prefer to secure the net where my ESP32s are connected to. I do not think the whole key handling and stuff is simple for a IOT device.

2021 WireGuard-ESP32 Communication WireGuard implementation for Arduino ESP32 Author: Kenta Ida Maintainer: Kenta Ida

@@AndreasSpiess -i just like simplicity, not associated with them- regarding getting a useable public connection its best to use an *unlimited data* ,fixed speed vpn with their generic debian10 +docker instance like ovhcloud vps '1 vCore,2 GB ,40 GB SSD NVMe ,250 Mbps *unmetered* for cheap rather than any of those American limited fixed data @ variable speeds corps. you can docker your remote WireGuard server there & just connect to/from your local WireGuard as you please + other dockers over there too. [yt keep deleting this post]

Thank you!

You're welcome

They seem to have changed the EEPROM quite a lot and recently created some problems. I used the version which was actual during the making of the video and used the script to install Nextcloud. Maybe you try to get a stable boot situation without any IOTstack first to separate the two problems. And go to the Discord channel if you need additional support

I had the transfer rate test in an earlier video about SSD boot.

Thank you for your support and welcome to the channel!

Thank you!

Thanks for the tip. The team on discord always do some improvements. Maybe they will add also the duckdns container.

I will have a look at it. Thanks.

You should be able to run Menu.sh again with the new selection.

It runs. Maybe you have a look at the size of the swap file with htop.

@@AndreasSpiess OK great! Thank you a lot, I'm gonna try next week or during Chrismas!

I am no specialist on raid systems. So somebody else has to do that. Pls. keep in mind that the Pi4 only has 2 USB3 connectors.

@@AndreasSpiess Thank you. I have read that there is a software called "mdadm" that helps in defining the disks, but I would find myself today unable to "add" that part into your project. It steps into "defining labels" so to recognise the logical disks and the physical disks. I don't even know how to use dockers, for the moment. For the speed I would love to imagine that even having usb 2.0 would make me satisfied for a very modest home user only. Most importantly, thank you again.

They do not need a VPN tunnel? Just a link as with google or dropbox?

@@AndreasSpiess yes, they only need the link like dropbox

Maybe you go to the discord channel of the project for your question?

It should be possible. However I m no HA specialist.

I never tried it, but quite a few viewers suggested the same. So I think, I have to try it once...

Interesting. I have domain name with a webhoster. How do I have to go from there?

@@AndreasSpiess To run a internet server at home your ISP and your router must support port forwarding. Especially ports 80 and 443. To run your own server at home with your own domain name, you'll need a dynamic DNS service. Your ISP changes your home IP address from time to time so you need dynamic dns service to keep track of your home IP address. DynDNS service provider will direct the internet trafic intended to your server to your current home IP address. No-IP is one of them but there are others too. They offer also a service to turn your domain name from your current web hotel to the dynamic dns providers servers so you can run your own server with your own domain name at home. Your server must be running the dynamic dns service provider's client program to keep their servers up to date with your current IP address at home. To get the Let's Encrypt SSL sertificate you must registrate your domain name to them, then load certbot program to your linux machine and run it. Of course before you can install the cerficate you must have a working http server running on your computer. I really recommend using Apache but there are instruction for other servers also. So the order of things to run your own Nextcloud server at home but also visible to internet 1. get a domain name or prepare to transfer your current domain name from web hotel to dyndns provider's servers. Check your current contracts about the web hotel and domain name. So that there are no nasty or expensive suprises from the web hotel when transferring the domain name. 2. choose a dynamic dns provider . No-IP as mine dyndns provider was more or less a random process. Today I would prefer a European provider. But I'm too lazy to change mine while it's working. 3. check that your chosen dyndns provider supports Let's Ecrypt. And vice versa. That Let's Encrypt supports chosen dyndns. 4. choose another dyndns provider until the terms are satisfied... 5. make a fresh linux installation 6. make your router settings. Port forward 80 and 443 to your newly installed linux computer. Set in the router a static local IP address to your linux computer's MAC address 7. install apache, php with needed additions and dyndns client program. Do not install Nextcloud at this point 8. registrate to Let's Encrypt 9. install certbot and run it with Let's Encrypt credentials to get a valid SSL certificate 10. backup your SSL certificate files to a safe place and media 11. install Nextcloud 12. start Nextcloud for the first time and make the settings. And fix the things it is complaining about. When you have everything running properly, for extra safety you can change your web servers ports to 5 number ports. If you do that, certbot won't be able to renew itself because it uses the defaults port numbers, so you must change the ports back to normal numbers in every second month to renew the certificate manually. For that I have two batch files. First to return the normal port numbers and reboot computer. Second to renew the certificate and change the ports back to long numbers and reboot. Not really a method for production environment but for me its working good enough. Unwanted visits to my http server ended. You must also make port forwards in the router for those long number ports. In Nextcloud client programs you give your server address followed with :portnumber (for example www.myownnextcloud.com:54321) For maintenance I have also a ssh connection to the Nextcloud server. Ssh is configured so that the port number is changed to a long number and you can login only with ssh keys. Also that port is forwarded in the router. But don't do that if you don't have to do maintenance over internet. PS. Four years ago it was not possible to get a free dyndns domain name that also works with Let's Encrypt. Maybe the situation is changed now. Someone else will know it better than me. If that is possible you can have a new domain name for your nextcloud server and keep the old one where it is.

Thank you very much for your writeup. It seems to be not easy, but possible...

@@AndreasSpiess Getting a Let's Encrypt's SSL certificate to work with a free dyndns domain name started to intrique me and I started digging the matter. Nowadays there are several free dyndns providers which domain names works with Let's Encrypt. So I decided to test it with a domain name from duckdns.org. And it worked. Easily. If you have your http server running properly and it is installed to use the domain name you have got from duckdns.org, you just load certbot and run it. It asks your e-mail address and your domain name and installs the certificate. More instructions of installing certbot from certbot.eff.org You have to run certbot once in every second month to renew the certificate. For installing and renewing the certificate you must have port 80 forwarded from the router to your server. For normal https trafic you must have port 443 forwarded. More instructions how to install duckdns update client from here www.duckdns.org/install.jsp

Thanks for the clarification. After your and a few other comments I decided to not open my home network. It seems too dangerous for me because of my hobby. I fear somebody would want to prove he is better than me ;-)

There is a discord server for support of this project. You find the link in the video description.

I always assign fixed IP addresses for servers.

@@AndreasSpiess Thanks for your reply.

I like docker because the install of the software including dependencies in the containers is done by knowledgeable people and you easy can get the newest version. In addition you can restart and shutdown each container in seconds. And if you delete it it is gone with all its dependencies.

@@AndreasSpiess docker seems awesome, im just very new to the concept of containers

You do not need to remove containers. If you talk about Portainer and portainer-CE: They use different ports. Usually, you only have to select one.

@@AndreasSpiess I removed and freed port 9000 so i could use it for portainer CE; works! Thanks!!

Thank you for sharing this iinfo. Can be valuable!

Maybe it would be interesting to add it to the IOTstack project?

PowerPoint

@@AndreasSpiess First i was thinking its joke ! :) .It isnt ! Your time management skills are awesome, how you can even have time to answer ppl, and make these cool videos. You are awesome, thank you !

By using the same tool for my work as for UKposts, for example (Powerpoint) ;-)

HDDs often need too much power (and sometimes even 12 volts. Maybe you will need an additional adapter for the HDD

Thank you for the tip!

You can do that of course if you intend to use a second disk. No problem. I just would not use it for data storage.

You find its description in the Wiki of the project.

Looks interesting! It probably solves problems I do not have with my home network. But for companies, this seems to be cool. But you do not have to go through any hassle. One thing I probably would not like is the single user in the free plan, even if you can use several devices. But maybe this limitation does not apply if my wife also uses the same user.

@@AndreasSpiess Yes the single user requirement is a bit cumbersome. I use a dedicated Google account that is shared across devices.

Using Tailscale for everything - I've got a dozen computers, phones, raspberries etc. Works very well and allows not to expose a single port to the internet! Even my hosted machine doesn't have a single port open, even for ssh - Tailscale allows it.

Glad you like such content. Indeed, it took me some time to get the "glue". Most other videos just show the normal stuff. Fortunately, I had the help of one of the maintainers of IOTstack to create the compose-override file. It makes things much easier... to put the VPN server in a DMZ for sure is more secure.

@@AndreasSpiess would a DMZ be something like running WireGuard on a GL.iNet MUDI router?

Raspberry Pi is not very fast. But they are Linux systems and you can do what you can do with other Linux systems.

Usually, Docker searches for the latest version when you restart the Yaml file. If not a specific version is mentioned. You have to check your yaml file or ask in the discord channel of the project. You can also update the container via Portainer.

Maybe you go to the Discord channel of the project for support.

The problem turned out to be the particular 'phone. I was using an Xioami Redmi Note 4. I then dug out an old Motorola Model G from 2014 and Wireguard works fine. Many thanks for the tutorial Andreas!

That is what I thought, too. I hoped somebody has a "silver bullet"... Solution 1 is obviously a no-go. And if I have to have a Pi in my DMZ I probably stay with Google or Dropbox. So it seem to be a good thing for a family or a small company.

@@AndreasSpiess I rent a server to run my own nextcloud. This puts my local network to low risk, but costs some bucks...

A good possibility. I hoped to be able to use it for community projects because the free google service does not allow for permission schemes. If I have to pay for NextCloud hosting I probalyy can also pay for a Google plan. What was your reasoning for Nextcloud on a paid server instead of cloud solution?

​@@AndreasSpiess That private server runs several other stuff I need, so the server costs for nextcloud are very minor. And, it was an advantage in terms of privacy. I try to avoid cloud services when possible. Yes, me writing on UKposts, I know.

Understood. I am very pragmatic with cloud services. Many problems can be easily solved with such services. I try to optimize my time. It gets more precious every year because I get closer to my death day...

:-))

You should see your node-red page on your mobile if you created a Wireguard tunnel.

@@AndreasSpiess Thank you very much for the prompt reply.

Maybe you go to their discord channel for support?

In my case I had access to other computers without doing anything.

rsync

@Michael: Does webdav synchronize my Raspberry directories with Nextcloud? @Tim: So I would use rsync to synchronize my "Nextcloud" directories on my Pi with Nextcloud?

@@AndreasSpiess think webdav as something like smb, except that it also works over the net

@@AndreasSpiess have a look at Syncthing

WebDAV has been really hit or miss for me in the past. Reading a directory with lots of images will time out on the client, and trying to upload large files will also fail. Then you get into weeds trying to configure the Apache proxy if that's the NC image you used, or the PHP.ini files. Then the problem might be the WebDAV client is not fully compatible. I really wanted all devices on my home network to use WebDAV with NC but in the end, used SMB shares to a mounted HDD. I do have NC but use it for syncing images from all smartphones. Using the iOS and Android apps. The windows client app is annoying as it tries to sync a local PC folder with NC so if you assign it to your images folder, it will back then all up to an images folder on NC - great - but then start deleting those images on windows and the client software will delete them on NC too. Which is fine if there was some options to change the behaviour, but there isn't. I use duck DNS to port forward to my NC docker image so I can access NC from anywhere for the images to upload. Using let's encrypt to manage SSL automatically

Maybe you go to discord for support?

@@AndreasSpiess Support for IOTStack ? or your discord channel ?

The discord of IOTstack

So far I did not try the Windows client.

@@AndreasSpiess Quick update - I managed to get the windows client working using the TunSafe tunsafe.com/ VPN client. It looks like the Wireguard version of the windows client has problems working on the latest windows update (20H2 for me).

No problem. Your English is understandable. You are welcome!

@@AndreasSpiess you can always access the Nextcloud from your RaspberryPi via so called WebDAV protocol. There is support for the so called davfs in the Linux Kernel as a filesystem. Here are several instructional Links to get you started: ajclarkson.co.uk/blog/auto-mount-webdav-raspberry-pi/ heinz-otto.blogspot.com/2018/01/webdav-auf-dem-raspberry.html blog.piandpython.net/add-nextcloud-to-your-raspberry-pi/ Apart from that you may be able to simply install the Nextcloud Desktop Client (there is an AppImage here github.com/nextcloud/desktop/releases/download/v3.3.0/Nextcloud-3.3.0-x86_64.AppImage that acts as a Sync daemon) under Raspberry too ? I usually simply connect to the Server as a WebDAV resource in my File Browser under the Linux Desktop Environment. The general WebDAV Path should be something like davfs://nextcloud-user@nextcloud-server.tld/nextcloud/remote.php/webdav and is described in their manual docs.nextcloud.com/server/20/user_manual/en/files/access_webdav.html Cheers Karla

It should work with a Pi3. But USB2 is very slow.

@@AndreasSpiess Thanks Andreas. The speed is not important. Thanks for your work and this video 👍👍👍👍

Is there an online guide to which you could point us for that?

@@PilotAtInception ukposts.info/have/v-deo/moGVpZxsr3eqtp8.html

@@dgeordgy21 thanks! I missed that one!

Maybe you go to their discord channel for support.

IOTstack only installs a few directories. After running menu. Sh you can delete it. Nothing is left if you do not start docker

@@AndreasSpiess I went on and installed IOTstack. However, I don't see wireguard in the list of available services (# ./menu.sh -> Build Stack). The documentation (sensorsiot.github.io/IOTstack/Containers/WireGuard/#setup) doesn't mention anything special. Am I missing something?

I think so. Did you use the repo from my link (sensorsiot)?

@@AndreasSpiess That was it! thanks

Welcome aboard the channel! This project is focused on the Raspberry and I assume you would create all sorts of problems if you use it in a different environment. But you can ask on their Discord channel.

They have a discord channel for support.

@@AndreasSpiess cannot find anything there with regard to my questions. any suggestions?

You can ask your question there.

I use sharing on dropbox and google and, as you describe, it works fine. I will have a look at Syncthing

@@AndreasSpiess sorry I think I didnt make it clear in my previous reply, I meant just like Dropbox and Google drive you can share files in Next cloud. You can do it from the webinterface and through the next cloud client as well. I switched from Google drive and Dropbox a long time ago to Next Cloud.

This depends on the contract you have with your internet provider.

@@AndreasSpiess I have gigbit internet on VPS side and 300 MBPS upload and download speed at home. Still when i test the tranfer speed with iperf3 it shows max 110 mbits/second. Do you know what might be the problem to this?

Thank you for the additional info

Thank you for the tip!

I do not know. Please ask the developers on discord.