Recent content by twei

I hope you're right, because that last sentence sounded like he's trying to expose the PVE Hosts themselves... Anyways, if he was trying to expose SSH and MySQL it would not be possible to do that using Caddy or Traefik (not sure about HAproxy) as AFAIK they only do HTTP(S), you'd have to DNAT...

You should rather do this using a VPN, since exposing the Web UI of your PVE Hosts might be seen as insecure. At least use Caddys request matchers to only allow connections from a specific IP (range)

It's Alpha Software, so please make sure your Backup works before trying that

It looks like that IP (3.74.105.242) belongs to the tailscale Network

...to be fair: most people in the English speaking world are calling it fiber (or fibre) as it technically isn't normal glass, that term is mainly used in the German-ish speaking world (i'll just count the Netherlands to that). Also there isn't really a difference for the OS whether you're...

Please provide the output of "nslookup pc-01" (you may need to install it using the following command: "apt install dnsutils") and "cat /etc/resolv.conf" I guess that you either didn't configure a DNS Server or that you didn't configure the DNS domain/search entries in /etc/resolv.conf

Hey, can you provide the full "ip a" and "ip r s" output for both the PVE Server and the Workstation? The network configuration (can be found at "/etc/network/interfaces") of the Server would also be helpful

Ich kann jetzt natürlich nicht dein restliches Netzwerk beurteilen, aber es sieht soweit richtig aus.

Er meinte, dass du als Bridge Port einfach das <physische Interface>.VLAN hinterlegen sollst, d.h. wenn das physische Interface (das wo das LAN Kabel drin steckt) "eth0" ist und du eine Bridge mit VLAN 100 haben willst, musst du als Bridge Port "eth0.100" hinterlegen. Wichtig: VLAN Aware nicht...

Having LISTEN_IP set to 0.0.0.0 means that the daemons will listen on the ports (e.g. 8006/tcp for the Web UI) on all interfaces. Setting it to a specific interface IP results in the daemons only listening to the ports on that specific IP, which means that there is no need to block traffic on...

Can't you leave it out of the Proxmox interface config then?

Mache es genau so, allerdings mit dem Unterschied, dass ich erst ein vmbr0000 mit dem physischen Interface als Port anlege. Das ermöglicht z.B. Router-on-a-Stick Konfigurationen mit OPNsense, die dann einfach vmbr0000 zugewiesen bekommen. Config dafür sieht in etwa so aus: auto vmbr0000 iface...

I want to setup a VM with all Traffic going through a VPN Tunnel, without having to set anything up on the Guest. So the final setup should be something like this: LAN -> vmbr0 -> other VMs -> OpenVPN Tunnel -> vmbr1 -> VM but I can't figure out how to setup OpenVPN to do this, as I...