schmurnan

Apologies in advance if this is the wrong community.

I’ve just returned to the game for the first time since 2017 after downloading the next-gen update. I’m a bit of a “trophy hunter”, but I’m also intrigued by mods and quick codes for the Bethesda games (I was a Skyrim fanatic). Will mods or “cheats” impact my ability to earn trophies?

If so, I’ll wait until I have the platinum and then try it.

I know “best” is subjective, but as someone who’s entrenched in the Apple ecosystem I always used to use the stock apps: Reminders, Calendar, Mail, Podcasts and, of course, Safari.

But over time I’ve moved away from some of those apps, towards things that work better than the stock apps but also still sync with my other Apple devices (iPhone, iPad, Watch): Things and Todoist (because I can’t decide on one over the other), Fantastical, Mail (still), Overcast… but I tend to hover between browsers.

I mainly use Safari, and try to use profiles to separate personal and work stuff. But over the years I’ve also tried Firefox, I’ve tried Brave and more recently I’ve tried Arc. But I just can’t make my mind up.

So I was curious what your browser of choice is (and also, if you have any other views on the best stock app replacements - including alternatives to the ones I listed above for GTD, calendars, email and podcasts (don’t get me started on the “best” search engine!), I’d be interested to get your opinions.

This probably isn’t possible, but I traded in an old MacBook Air and chose to get the cash added to my Apple account. However, at the minute it just pays some of my subscriptions automatically, and I was wondering if I can withdraw it somehow?

I was looking to buy a few apps (Swish, Transmit) and figured I could get them off the Mac App Store. But Swish isn’t on there and the App Store version of Transmit doesn’t seem worth it compared to getting it directly from their website.

So wondered if I could somehow transfer the cash from my Apple account but guessing the answer is “no”?

Hopefully these scenarios are common, and therefore easy to resolve...

I have a photo shelf in my lounge that I was thinking of trying to light up of an evening using some kind of HomeKit-enabled lighting - but not sure what kind of light. Being that it's high up, it'd be better if the lights were battery operated so as not to have a big wire trailing down, but it's not the end of the world if that's not possible, as I'm sure I could hide the wire behind a nearby tall plant.

The shelf I have is a simple one from IKEA (here), and I was thinking of either putting something along the front of the shelf, behind the lip, or in between the 3 photos I have on there.

The other scenario is the aforementioned tall plant. I was also looking for an option of something that can be placed in the plant pot, firing upwards, to light the plant. Wired is less of a problem here, as I have an outlet right next to it.

Again, plant is an artificial IKEA one (here).

Any thoughts/suggestions for what's out there (I'm in the UK)?

Thanks in advance!

Pretty much as the title says, just wondered if it was possible for me to stop listening to a playlist on my Mac and seamlessly pick it up on my iPhone, rather than starting the playlist again?

I'm pretty sure this has happened to me several times over the years, but it hasn't happened for a while so I can't remember the fix.

But for some reason, the notifications for Mail on my Apple Watch are square instead of circular. As you know, circular notifications are interactive and can be replied to, actioned, etc. whereas square ones are literally notifications and you can't do anything with them.

Any ideas how to fix?

Apologies in advance - I've tried searching but couldn't find anything in here.

I've joined a community that provide updates and documentation via Google Sheets, Docs, etc. but when I try to open them on the browser on my iPhone (either Safari or Brave), I can't edit them. As soon as I click on the Edit icon, I get a prompt to download the app.

I don't have a Google account, nor do I use any of their services (consciously), so would like a way to open the documents in the MS Office equivalent (Word, Excel, etc.) so I can edit the documents successfully.

TIA.

TL;DR - which privacy-focused search engine do people recommend, preferably one that can also easily be used as a default option in Safari?

I ditched Google in about 2016ish I would guess, and since then have used DDG as my default search engine.

As someone entrenched in the Apple ecosystem, it’s always seemed like a sound choice, as it’s one of the search engines built in to Safari on both iOS and macOS.

After spending a bit more time recently playing around with and updating my Docker containers, I started hosting a Whoogle container, which seemed to work pretty well, but I don’t see many out there talking about it, so not sure how good it actually is. I then tried a SearXNG container, but either had it misconfigured or just wasn’t getting many search results back.

At the moment I’m trying out Startpage, but I know there are potential privacy concerns since they were part-bought in 2019 by a US ad-tech company.

I’m also playing around with different browsers at the moment, flicking between Safari, Firefox and Brave. At which point I stumbled across Brave Search, which seems pretty promising.

So, which search engines do you all recommend?

UPDATE: Probably should’ve done a poll! But latest (if I’ve captured everything correctly) is:

• DuckDuckGo - 10
• Qwant / SearXNG / Kagi / Brave - 4
• Startpage / Ecosia - 2
• Google - 1

As to my other questions around browsers:

• Majority seem to use Firefox
• Some mentions of Brave
• One mention of Arc

I'm trying to access my Pi-hole container from pihole.mydomain.com without any ports or /admin, and I swear the multitude of posts on the internet make this seem really straightforward. Perhaps it is and I'm being dumb, but I cannot get it to work.

Below is my current docker-compose for both Traefik and Pi-hole:

version: "3.7"

services:
  traefik:
    container_name: traefik
    image: traefik:latest
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      - medianet
    ports:
      - 80:80
      - 443:443
    environment:
      - CF_API_EMAIL=${CF_API_EMAIL}
      - CF_DNS_API_TOKEN=${CF_DNS_API_TOKEN}
      - TZ=${TZ}
      - PUID=${PUID}
      - PGID=${PGID}
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /path/to/traefik:/etc/traefik
      - /path/to/shared:/shared
      - /path/to/traefik/logs/traefik.log:/etc/traefik/logs/traefik.log
      - /path/to/traefik/logs/access.log:/etc/traefik/logs/access.log
    labels:
      - traefik.enable=true
      - traefik.http.routers.traefik.entrypoints=http
      - traefik.http.routers.traefik.rule=Host(`${TRAEFIK_DASHBOARD_HOST}`)
      - traefik.http.middlewares.traefik-auth.basicauth.users=${TRAEFIK_USER_PASS}
      - traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https
      - traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https
      - traefik.http.routers.traefik.middlewares=traefik-https-redirect
      - traefik.http.routers.traefik-secure.entrypoints=https
      - traefik.http.routers.traefik-secure.rule=Host(`${TRAEFIK_DASHBOARD_HOST}`)
      - traefik.http.routers.traefik-secure.middlewares=traefik-auth
      - traefik.http.routers.traefik-secure.tls=true
      - traefik.http.routers.traefik-secure.tls.certresolver=cloudflare
      - traefik.http.routers.traefik-secure.tls.domains[0].main=${TRAEFIK_BASE_DNS}
      - traefik.http.routers.traefik-secure.tls.domains[0].sans=*.${TRAEFIK_BASE_DNS}
      - traefik.http.routers.traefik-secure.service=api@internal

  pihole:
    container_name: pihole
    image: pihole/pihole:latest
    restart: unless-stopped
    networks:
      - medianet
      - npm_network
    domainname: mydomain.com
    hostname: pihole
    ports:
      - 53:53/tcp
      - 53:53/udp
    environment:
      - TZ=${TZ}
      - WEBPASSWORD=${WEBPASSWORD}
      - FTLCONF_LOCAL_IPV4=192.168.1.116
      - WEBTHEME=default-auto
      - DNSMASQ_LISTENING=ALL
      - VIRTUAL_HOST=pihole.mydomain.com
    volumes:
      - /path/to/pihole:/etc/pihole
      - /path/to/pihole/dnsmasq.d:/etc/dnsmasq.d
    cap_add:
      - NET_ADMIN
    labels:
      - traefik.enable=true
      - traefik.http.routers.pihole.rule=Host(`pihole.mydomain.com`)
      - traefik.http.routers.pihole.entrypoints=https
      - traefik.http.routers.pihole.tls=true
      - traefik.http.routers.pihole.service=pihole
      - traefik.http.services.pihole.loadbalancer.server.port=80

The Pi-hole one will load the login page and, upon entering the password and logging in, it will simply bring me back to the login page. So just keeps looping around.

The Traefik config is working with lots of other containers, all of which are using SSL certificates, so I'm pretty sure my Traefik config is okay.

I've tried middlewares to addprefix=/admin, which just ends up looping round with multiple /admin prefixes and also doesn't work.

Anybody got any ideas?

I'm aware I don't have to put Pi-hole behind SSL as I'm not exposing any of this stuff to the open internet (ports 80 and 443 are not forwarded on my router, and I'm using local DNS records in Pi-hole to access via subdomains).

Happy to post my traefik.yml and config.yml files if needed.

UPDATE: I seem to have figured it out! Below is my final Pi-hole docker-compose - the Traefik one remains unchanged from the original post:

  pihole:
    container_name: pihole
    image: pihole/pihole:latest
    restart: unless-stopped
    networks:
      - medianet
      - npm_network
    domainname: mydomain.com
    hostname: pihole
    ports:
      - 53:53/tcp
      - 53:53/udp
    environment:
      - TZ=${TZ}
      - WEBPASSWORD=${WEBPASSWORD}
      - FTLCONF_LOCAL_IPV4=192.168.1.116
      - WEBTHEME=default-auto
      - DNSMASQ_LISTENING=ALL
      - VIRTUAL_HOST=pihole.mydomain.com
    volumes:
      - /path/to/pihole:/etc/pihole
      - /path/to/pihole/dnsmasq.d:/etc/dnsmasq.d
    cap_add:
      - NET_ADMIN
    labels:
      - traefik.enable=true
      - traefik.http.routers.pihole.entrypoints=http
      - traefik.http.routers.pihole.rule=Host(`pihole.mydomain.com`)
      - traefik.http.middlewares.pihole-https-redirect.redirectscheme.scheme=https
      - traefik.http.routers.pihole.middlewares=pihole-https-redirect
      - traefik.http.routers.pihole.service=pihole
      - traefik.http.routers.pihole-secure.entrypoints=https
      - traefik.http.routers.pihole-secure.rule=Host(`pihole.mydomain.com`)
      - traefik.http.routers.pihole-secure.tls=true
      - traefik.http.routers.pihole-secure.service=pihole
      - traefik.http.services.pihole.loadbalancer.server.port=80

I'm sure I'm massively overthinking this, but any help would be greatly appreciated.

I have a domain name that I bought through NameCheap and I've pointed it to Cloudflare (i.e. updated the name servers). I have a Synology NAS on which I run Docker and a few containers. Up until now I've done this using IP addresses and ports to access everything (I have a Homepage container running and just link to everything from there).

But I want to setup SSL and start running Vaultwarden, hence purchasing a domain name to make it all easier.

I tried creating an A record in Cloudflare to point to the internal IP of my NAS (and obviously, this couldn't be orange-clouded through CF because it's internal to my LAN). I'm very reluctant to point the A record to the external IP of my NAS (which, for added headache is dynamic, so I'd need to get some kind of DDNS) because I don't want to expose everything on my NAS to the Internet. In actual fact, I'm not precious about accessing any of this stuff over the internet - if I need remote access I have a Tailscale container running that I can connect to (more on that later in the post). The domain name was purely for ease of setting up SSL and Vaultwarden.

So I guess my questions are:

• What is the best way to go about this - do I create a DDNS on the NAS and point that external IP address to my domain in Cloudflare, then use Traefik to just expose the containers I want to have access to using subdomains?
• If so, then how do I know that all other ports aren't accessible (I assume because I'm only going to expose ports 80 and 443 in Traefik?)
• What do other people see (i.e. outside my network) if they go to my domain? How do I ensure they can't access my NAS and see some kind of page?
• Is there a benefit to using Cloudflare?
• How would Pi-hole and local DNS fit into this? I guess I could point my router at Pi-hole for DNS and create my A records on Pi-hole for all my subdomains - but what do I need to setup initially in Cloudflare?
• I also have a RPi that has a (very basic) website on it - how do I setup an A record to have Cloudflare point a sub-domain to the Pi's IP address?
• Going back to the Tailscale thing - is it possible to point the domain to the IP address of the Tailscale container, so that the domain is only accessible when I switch on the Tailscale VPN? Is this a good idea/bad idea? Is there a better way to do it?

I'm sure these are all noob-type questions, but for the past 6-7 years I've purely used this internally using IP:port combinations, so never had to worry about domain names and external exposure, etc.

Many thanks in advance!

I’ve got my library just as I want it, and have made a couple of changes to the in my movies’ .nfo files.

This is fine for a day or so, and then Jellyfin decides to overwrite my .nfo files.

I have them set to “lock” via tinyMediaManager but it doesn’t seem to make any difference. Every day it’ll reorder some movies in my library.

Pretty sure I’ve also disabled the image plug-ins in the library so it shouldn’t be pulling any metadata from anywhere.

Not a huge deal but incredibly frustrating — I want my library showing movies in a certain order and it’s driving me nuts when they’re rearranged 🤣

Any ideas?

TIA.

Just wondered what people are using for their password management.

I’m currently using 1Password on a family subscription for both password management and 2FA (and then Authy for the 1Password 2FA). But I’m seeing a lot more posters — particularly since joining Lemmy — championing BitWarden (either cloud or self hosted) and Raivo OTP as a cheaper, almost-as-functional alternative.

So is it worth the switch? Will I lose out on anything by doing so?

I’m currently running BitWarden with a free account to see if I can live with it. But I must admit, 1Password is a staple app for me and one that I would say is priceless to my workflow and setup.

Just interested in your thoughts and trying to stimulate conversation!