Recent content by racitup

Thanks for the replies. TLDR: snapshot is the verified answer. Details: If you go to /var/log/vzdump on the pve you should have some backup logs for your containers: Points to note: 150 only has one disk so doesn't go offline at all in snapshot mode 202 is set to snapshot with 2 disks and is...

Would it be possible to use xfsdump (or xfs_copy) to backup a running pve node root partition, which is xfs within a LV? The reason: I only have one PVE, so no cluster. I have all my containers backed up offsite to PBS. But not backing up the PVE makes me a bit vulnerable. I've made all sorts of...

But is there a log that allows me to compare downtime?

Use less /var/log/mail.info to see if there are any problems sending email

For a locked down SMTP server using TLS, instead of the smtp_header_checks, I had to do: # main.cf smtp_generic_maps = hash:/etc/postfix/login_map # login_map root@hostname.domain.tld mailbox_user@domain.tld mailbox_user@domain.tld would be the same as that used in sasl_passwd edit...

I'm trying to figure out which one of snapshot and suspend I should use for containers to minimise downtime. Is there a log somewhere that tells me this? The docs say 'minimal downtime' for suspend, but I would like to compare with snapshot...

But how do I enable these?

I've raised a bug report here bugzilla 3868 about this. Just to recap, Letsencrypt allow up to 100 domains per certificate, but the Proxmox UI only allows 5. Is this likely to change or should I try to hack the code/find an alternative solution?

It looks as though the debian bullseye (11) repo only has the main crowdsec package and not any additional packages like the firewall bouncer. The main crowdsec install script also doesn't detect proxmox 7 as a debian bullseye distro. I have managed to install a bouncer using the below, but is...

Feature request: https://bugzilla.proxmox.com/show_bug.cgi?id=3787

It appears the client specifies the Subject in the CSR defined by RFC2986

Yes but the CN is visible when people investigate the certificate in the browser, SAN is not. Seems odd to give people the functionality to have multiple domains but not let them choose the visible primary one. The functionality is so handy I'm using the cert for my main web proxy, so that's...

Awesome, thanks! Another related question, are you planning to include a feature where you choose which domain in the ACME list becomes the primary certificate domain that is displayed in the browser (is this the Subject?)? I have updated my certificate a couple of times and it appears to take...

I have been able to add a new DNS API script to acme.sh for Mythic Beasts, load it and use it with Proxmox according to this thread. 1. Put your script in here: /usr/share/proxmox-acme/dnsapi 2. You no longer need to edit the perl file according to that thread, instead you change it here...

It seems the ACME section is only available to the root user!