Plus, why are we building our containers with Tailscale networking now, and the latest from the Home Assistant project?

Sponsored By:

• The Launch 🚀: Chris guides you through the most interesting stories and clips that set the stage for the rest of the week, while playing some of his favorite value 4 value tracks.
• Tailscale: Tailscale is a Zero config VPN. It installs on any device in minutes, manages firewall rules for you, and works from anywhere. Get 3 users and 100 devices for free.
• Trusteebook: TrusteeBook - a simple, easy-to-use workbook that helps you take control of your digital legacy. Get started today, and take $10 off. Promo Code: SELFHOSTED

Support Self-Hosted

Links:

• ⚡ Grab Sats with Strike Around the World — Strike is a lightning-powered app that lets you quickly and cheaply grab sats in over 36 countries.
• 🎉 Boost with Fountain FM — Fountain 1.0 has a new UI, upgrades, and super simple Strike integration for easy Boosts.
• 🍔 Lunch at SCaLE 🍇, Sat, Mar 16, 2024, 1:30 PM | Meetup — Let's put an official time down on the calendar to get together. The Yardhouse has always been a solid go-to, so sit down and break bread with the Unplugged crew during the lunch break on Saturday!
• SCALE 21x
• Yard House Menu
• SCaLE Chat Room on our Matrix Server — Join our room dedicated to organizing around SCaLE each year.
• Contain your excitement: A deep dive into using Tailscale with Docker — By putting containers directly onto your tailnet (our term for a Tailscale network), you're able to connect these isolated things together no matter the networking topology that stands in your way.
• Tailscale for Docker Container - Chris' Note — The basic idea is to create a tailscale service container, that runs along side the main app container. You then set the main app container to use the tailscale container for networking.
• audiobookshelf-docker-compose.yml — Chris' docker-compose.yml for audiobookshelf that uses a Tailscale service container for networking.
• 2024.2: More voice, more icons, more integrations, more... everything! — In general, contributions to our open-source project have been amazing this month. I’ve never seen so many contributed bug fixes, improvements, and new features in a single release. Like… 21 new integrations! This is, without a doubt, the largest release we’ve ever put out. A big shout-out to everyone who helped! ❤️
• Companion app for iOS 2024.1: CarPlay is here! — CarPlay support now gives Home Assistant users easy access to their devices and areas and the ability to create custom actions.
• home-assistant-assist-desktop — Use Home Assistant Assist on the desktop. Compatible with Windows, MacOS, and Linux
• Plex launches its rental service with some award-winning movies — The new movie rental marketplace from the streaming service gives users 30-day access to premium titles.

Special Guest: Wolfgang.

Sponsored By:

• Tailscale: Tailscale is a Zero config VPN. It installs on any device in minutes, manages firewall rules for you, and works from anywhere. Get 3 users and 100 devices for free.
• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/ssh
• 45drives: The HL15 from 45HomeLab is an open-source, open-platform, 15-bay homelab server.

Support Self-Hosted

Links:

• ⚡ Alby: Your Boost companion for the web — Create an Alby Account to get a lightning wallet for payments wherever you go.
• ⚡ Self-Hosted on the Podcastindex.org — Send a Boost into the show via the web. First, top-up Alby, then head over to our entry on the Podcast Index.
• Servo Mounted Ball Valve Blast Gate by The Brumberjack — Used to automatically open and close different parts of an airflow system.
• Wolfgang's Channel - YouTube — Hi! My name is Wolfgang and I make videos about tech, Linux and computers.
• Wolfgang's Blog
• Restricting ASRock Rack BMC to dedicated IPMI_LAN port only — During this process I came across a frustrating "bug" in the Asrock Rack BMC implementation. No matter the settings I gave the BMC it was getting two IP addresses. One on the IPMI_LAN port as expected in my management VLAN, and another on eth0 which is undesirable.
• Archive.org: opensense.com
• OPNsense.com - OPNsense.org — WIPO decides in favour of OPNsense
• pfSense Plus and pfSense CE: Dev Insights and Direction
• pfSense 2.5.0 Development Snapshots Now Available
• New license types pfSense CE & Plus
• pfSense Plus Home+Lab is no longer available as a free download. TAC Subscription now required for CE upgrades.
• Addressing Changes to pfSense Plus Home+Lab — Today, we are announcing that the Home+Lab version of pfSense Plus, the commercial fork of the popular open-source firewall pfSense, is no longer available for free download.
• Plex Users Fear New Feature Will Leak Porn Habits to Their Friends and Family — "I can see that one of my friends is apparently watching a ton of cheesy, soft porn stuff," a user said of Plex's Week in Review email and Discover Together feature.
• wESP32 — Wired ESP32 with PoE — The wESP32™ is an ESP32-based core board with wired Ethernet connectivity and power over Ethernet (PoE)
• ESP32-S3-BOX-3 Espressif Systems AIoT — The future Home Assistant voice hardware is shipping.
• Unifi Network - Setup Chromecast between VLANs
• Chromecast casting support across IP networks
• Inter-VLAN Casting with Chromecasts
• Jovian-NixOS — A set of packages and configurations for running NixOS on the Steam Deck.
• SSH 111 Boost Barn! — Thank you Boosters!
• Post-Show: Using NixOS as a router

Special Guest: Brent Gervais.

Sponsored By:

• CloudFree.shop: CloudFree Smart Plug – Runs Tasmota for $9. Use code SELFHOSTED and support the show. Promo Code: SELFHOSTED
• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/ssh

Support Self-Hosted

Links:

• You can't buy a Raspberry Pi right now — ...or at least, not without a lot of patience or a fat wallet.
• Matter is now official! — The Connectivity Standards Alliance has certified and released the first version of the Matter smart home interoperability protocol Tuesday and I couldn’t be happier.
• Paulus Schoutsen on Twitter — Ladies and gentlemen, we've got it! That's the first release.
• Invoice Ninja — Focus on doing what you love. We’ll help with the invoicing.
• Docker files for Invoice Ninja — Introducing our very own Helm Chart that helps you launch a simple standalone app to a production-ready, highly available Invoice Ninja setup.
• InvoicePlane — InvoicePlane is a self-hosted open source application for managing your quotes, invoices, clients and payments.
• Cloudflare Zero Trust and Yubico — Yubico is providing Security Keys at “Good for the Internet” pricing - as low as $10 per key.  Yubico will ship the keys to customers directly.
• SSH with YubiKey
• Bitwarden Two-step Login via YubiKey
• expanse — fully selfhosted multi-user web app for externally storing Reddit items (saved, created, upvoted, downvoted, hidden) to bypass Reddit's 1000-item listing limits
• Use Bitwarden to Generate Email Aliases with Fastmail — As of the September release, the Bitwarden username generator now supports creating email aliases
• netbird — NetBird is an open-source VPN management platform built on top of WireGuard® making it easy to create secure private networks for your organization or home.
• RuneAudio — RuneAudio is a free and open source software that turns embedded hardware into Hi-Fi music players.
• Volumio - The Audiophile Music Player — A very powerful and convenient music aggregator, now Volumio can also be used with great results in all sorts of different situations.
• snapcast: Synchronous multiroom audio player — Snapcast is a multiroom client-server audio player, where all clients are time synchronized with the server to play perfectly synced audio. It's not a standalone player, but an extension that turns your existing audio player into a Sonos-like multiroom solution.
• ConBee II Zigbee USB Gateway — Universal Zigbee USB gateway integrates Zigbee products across manufacturers
• Slaesh Zigbee 3.0 USB Stick - CloudFree — Recommended by Zigbee2MQTT
• Badgers Stack — A new page for May 2022, here's a high level overview snapshot of PMS as it stands today.
• Install Proxmox VE on Debian 11 Bullseye — The installation of a supported Proxmox VE server should be done via bare-metal ISO installer. In some cases it makes sense to install Proxmox VE on top of a running Debian Bullseye 64-bit, especially if you want a custom partition layout. For this How-To any official Bullseye installation medium should work.
• ironicbadger/infra: 99.9% less leaked credentials
• Send a Boost with a New Podcast App — Upgrade to a Podcasting 2.0 compatible app.

And Brent's tale of giving the gift of Jellyfin.

Special Guest: Brent Gervais.

Sponsored By:

• Tailscale: Tailscale is a Zero config VPN. It installs on any device in minutes, manages firewall rules for you, and works from anywhere. Get 3 users and 100 devices for free.
• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/ssh

Support Self-Hosted

Links:

• homebridge — Homebridge is a lightweight NodeJS server you can run on your home network that emulates the iOS HomeKit API. It supports Plugins, which are community-contributed modules that provide a basic bridge from HomeKit to various 3rd-party APIs provided by manufacturers of "smart home" devices.
• HomeKit - Home Assistant — The HomeKit integration allows you to make your Home Assistant entities available in Apple HomeKit, so they can be controlled from Apple’s Home app and Siri; even if those devices do not natively support HomeKit.
• How to Easily Program NFC Tags with Your iPhone — The best part is that you can do many things with an NFC tag. Basically, the sky is the limit – and if you can program it, you can use an NFC tag to automate it.
• Apple TV - Home Assistant — The Apple TV integration allows you to control an Apple TV (any generation).
• Infuse 7 on the App Store — Ignite your video content with Infuse – the beautiful way to watch almost any video format on your iPhone, iPad, Apple TV, and Mac. No need to convert files! Infuse is optimized for macOS 12, with powerful streaming options, Trakt sync, and unmatched AirPlay & subtitle support. Gorgeous interface. Precise controls. And silky-smooth playback.
• Docker - Perfect Media Server
• Dozzle — Dozzle is a real-time log viewer for docker containers.
• ChrisLAS Birthday Party Hang and Chow Meetup — Join us at the studio up in Arlington for a hang and chow. Attendees are encouraged to bring their favorite dish or at least an appetite.

Plus, how Chris built a Nest-type thermostat using parts he already had.

Sponsored By:

• A Cloud Guru: Looking to make a high-paying career move into the cloud? Get going: acloudguru.com
• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/ssh
• CloudFree.shop: CloudFree Smart Plug – Runs Tasmota for $9. Use code SELFHOSTED and support the show. Promo Code: SELFHOSTED
• MyLocalBytes: Smart Home gear pre-flashed with Tasmota - For an exclusive discount, use code SELFHOSTED and support the show. Promo Code: SELFHOSTED

Support Self-Hosted

Links:

• Tailscale · Best VPN Service for Secure Networks — Create a secure network between your servers, computers, and cloud instances. Even when separated by firewalls or subnets, Tailscale just works.
• headscale — An open source, self-hosted implementation of the Tailscale coordination server.
• Intelligent Platform Management Interface — The Intelligent Platform Management Interface (IPMI)
• ASUS Hyper M.2 X16 PCIe 3.0 X4 Expansion Card — Supports 4 NVMe M.2 (2242/2260/2280/22110) Upto 128 Gbps
• TRÅDFRI Shortcut button — Shortcut button, white
• restic · Backups done right! — Restic is a modern backup program that can back up your files
• autorestic: High level CLI utility for restic — Autorestic is a wrapper around the amazing restic. While being amazing the restic cli can be a bit overwhelming and difficult to manage if you have many different locations that you want to backup to multiple locations. This utility is aimed at making this easier 🙂.
• Backing up your data with Restic (+ Autorestic) and Minio
• Generic Thermostat - Home Assistant — The generic_thermostat climate platform is a thermostat implemented in Home Assistant. It uses a sensor and a switch connected to a heater or air conditioning under the hood. When in heater mode, if the measured temperature is cooler than the target temperature, the heater will be turned on and turned off when the required temperature is reached.
• ASRock Rack > E3C246D4U

Sponsored By:

• A Cloud Guru: Grow your skills — and your career. Get 20% off access to the most effective, hands-on cloud learning. Promo Code: springintocloud21
• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/ssh

Support Self-Hosted

Links:

• Unofficial Bitwarden compatible server written in Rust — This is a Bitwarden server API implementation written in Rust compatible with upstream Bitwarden clients*, perfect for self-hosted deployment where running the official resource-heavy service might not be ideal.
• bitwardenrs server Docker
• Changes to LastPass Free — As a Free user, your first login on or after March 16th will set your active device type. You’ll have three opportunities to switch your active device type to explore what’s right for you.
• How to Self-Host the bitwarden_rs Password Manager | Linode
• DDoSers are abusing the Plex Media Server to make attacks more potent — Plex Media servers using SSDP let DDoSers amplify attacks by a factor of 5.
• Intel GVT-g — Intel GVT-g is a technology that provides mediated device passthrough for Intel GPUs (Broadwell and newer). It can be used to virtualize the GPU for multiple guest virtual machines, effectively providing near-native graphics performance in the virtual machine and still letting your host use the virtualized GPU normally.
• Ghost Membership Software: Sustainable revenue for publishers
• Ghost Docs — The Docker image for Ghost is an unofficial community package maintained by people within the Ghost developer community.
• systemd-homed — systemd-homed is a systemd service providing portable human-user accounts that are not dependent on current system configuration.
• 3D Printing a custom Vantrue S1 dash cam bracket for a Golf R
• Prusa3D - Open-Source 3D printers by Josef Prusa
• Thingiverse - Digital Designs for Physical Objects

Plus what's wrong with OPNsense's Wireguard setup?

Sponsored By:

• A Cloud Guru: This course will provide you the fundamentals, tools, techniques, and use case examples to configure, manage and troubleshoot Linux networking
• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/ssh

Support Self-Hosted

Links:

• VZW TTL Trick Alex Found on Reddit — By default, Android and iOS (probably) have IP TTL's of 64. The ISPs can use this knowledge to decide whether or not a packet originated from the Android device or if it was only routed through the Android device. For example, Linux distributions typically have a default TTL of 64.
• FileRun - File Manager — Just like you do with an FTP server, point FileRun to where you keep the files on your server and you will get instant web access to them.
• termpad — Just an empty terminal, in your browser.
• Tinypin — A self-hosted, minimalistic image collection board.
• OPNsense 21.1 Released — For those wondering, the WireGuard plugin has been available since 2019 and receives continuous improvements by its maintainer and various users alike.  And that is unlikey to change in the future. 
• Setting up linuxserver/wireguard — Putting your docker stack behind a VPN.
• linuxserver.io: WireGuard — Docker container to run WireGuard.
• Passthrough Intel iGPU with GVT-g to a VM and use Quick Sync with Plex in docker on Proxmox — Passing through an entire GPU is very useful for specific tasks but isn't a very efficient use of resources. Wouldn't it be nice if we could slice up 1 GPU and use it with multiple VMs at once?
• Hassio-google-drive-backup — A complete and easy way to back up your Home Assistant snapshots to Google Drive.
• Duplicati — Backup files and folders with strong AES-256 encryption. Save space with incremental backups and data deduplication. Run backups on any machine through the web-based interface or via command line interface. Duplicati has a built-in scheduler and auto-updater.

Support Self-Hosted

Links:

• Raspberry Pi Power Monitor Flyer
• Roundcube — ...is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an email client, including MIME support, address book, folder manipulation, message searching and spell checking.
• SquirrelMail - Webmail for Nuts!
• Install Docker Engine — Docker provides convenience scripts at get.docker.com and test.docker.com for installing edge and testing versions of Docker Engine - Community into development environments quickly and non-interactively.
• Netdata Installation guide
• Setup a secure (SSH) tunnel as a systemd service. — Setup a secure (SSH) tunnel as a systemd service. #systemd #ssh #ssh-tunnel #ssh-forward
• Self healing reverse SSH setup with systemd
• How to install OPNSense on PCEngines' APU2
• pfSense Makes Sense | LAS s28e09 - YouTube
• OPNsense WireGuard Road Warrior guide
• Rewrote Wireguard Road Warrior manpage to be clearer and more concise by IronicBadger — Pull Request #275
• SSH over SMS | Devpost — Our python project listens for a text message (through a dedicated SMTP email server) then reads and parses the email to get a bash command.
• Raspberry Pi Power Monitor — The power monitor project we discuss in the show.

Plus why Chris continues to collect Raspberry Pi's at an alarming rate.

Support Self-Hosted

Links:

• Raspberry Pi 4 Storage Benchmarks
• Home Assistant on Twitter — "We're deprecating the Home Assistant Supervised installation on Generic Linux. Alternatives are to run Home Assistant Core in a Docker container or run our OS in a VM."
• [On hold] Deprecating Home Assistant Supervised on generic Linux — We’re going to put the deprecation plan on hold for now. Anyone running this installation method today can continue running this. We will offer more clear information in the future.
• traefik host mode example
• HomelabOS — Your offline-first privacy-centric personal data center.
• HomelabOS - Syncing Settings via Git — HomelabOS will automatically keep the settings/ folder in sync with a git repo if it has one. So you can create a private repo on your Gitea instance for example, then clone that repo over the settings folder. Now any changes you make to settings/ files will be commited and pushed to that git repo whenever you run make, make update or make config.
• Introduction - HomelabOS — Ansible templates out the HomelabOS config file using Jinja2 templating, which is then used to deploy HomelabOS itself.
• sanoid for ZFS Snapshots — Policy-driven snapshot management and replication tools. Using ZFS for underlying next-gen storage.

Plus our favorite travel router with WireGuard built in, and Chris kicks off Project Off-Grid. Meanwhile, Alex adopts proprietary software.

Support Self-Hosted

Links:

• 5.11 Taclite Trousers — Constructed using premium polyester and cotton mechanical stretch Taclite ripstop fabric with a triple-stitching built, this pair of pants is sturdy and flexible to ensure maximum performance in the field.
• Amazon.com: Gigabit Travel AC Router OpenWrt — Slate Comes with Pre-installed VPN server and client functions in WireGuard and OpenVPN.
• GL-AR750S - The SLATE Our favorite travel router — The first dual-band Gigabit AC travel router. We upgrade Ethernet ports (totally 3) to Gigabit ports so that it get faster speed in your travel. We also added 128MB Nand Flash to provide dual flash for more storage and faster operation speed. It has a MicroSD (TF) slot which increase your storage space up to 128GB.
• Raneto - A free, open, simple Markdown powered Knowledgebase — Raneto is an open source Knowledgebase platform that uses static Markdown files to power your Knowledgebase.
• raneto - Docker Hub
• SmokePing — SmokePing keeps track of your network latency.
• smokeping - Docker Hub
• Find the Containers Chris Uses
• Migrate qcow2 images from KVM to VMWare — I recently switched from Proxmox to ESXI for my primary Hypervisor due to better support for automation tools like Ansible and Terraform plus better integrations with Red Hat Satellite.
• Gotchas when migrating Fedora qcow2 images to vmware — My issue was that the initramfs didn't contain the necessary drivers for the emulated hardware and as such the VM refused to boot except into emergency mode.