[01:34:21]
<Buny ✨> > Hmm. We’re having trouble finding that
[01:42:59]
<Buny ✨> Or with vivaldi:
> This site can’t be reached
[01:44:41]
<Buny ✨> Huh.
[01:44:41]
<Buny ✨> When i tried to duplicate the SSH, I got this. Don't know if it's anything:
> The file "/home/username/.var/app/org.remmina.Remmina/data/remmina/
group_proto_name_host.remmina" is corrupted, unreadable, or could not
be found.
[01:44:42]
<Buny ✨> https://paste.yunohost.org/raw/yeyonibabi
[01:44:42]
<Buny ✨> I turned off the ssh program and restarted it. Got a Portal login screen. And when I went to the localhost ip address, it worked fine.
[02:57:44]
<Buny ✨> Can you use a domain for more than one thing?
[03:24:56]
<m606> yes I believe it looks good.
[03:25:12]
<m606> in case you experience issues with Remmina, as you seem to be using Linux, note that you can use the terminal as well: https://www.geeksforgeeks.org/linux-unix/ssh-command-in-linux-with-examples/
[03:25:25]
<m606> yes, well my mistake, I meant https://yourdomain.tld/yunohost
[03:25:32]
<m606> does it bring you to the YunoHost login page (if you are not already logged-in)?
[03:25:40]
<Buny ✨> No, I get the porkbun parked address page
[03:25:54]
<Buny ✨> I'm trying to edit the DNS records, but I can't figure out what to point the "answer" to.
[03:29:39]
<m606> have you checked https://doc.yunohost.org/en/admin/get_started/post_install/dns_config/ ?
[03:29:43]
<Buny ✨> Yes. I am not understanding what I'm supposed to use in place of
> 111.222.333.444 (your IPv4)
[03:38:54]
<m606> it depends on what you want to do. Yunohost comes with an email stack, so if your goal is to use on the same domain Tutanota's server for emails and Yunohost for everything but emails (or Yunohost emails in addition), it may be possible, but will likely require advanced config I can't personally guide you with.
https://forum.yunohost.org/t/external-mail-service-for-domain-with-app-installed-that-needs-to-send-mail/31872/4
https://forum.yunohost.org/t/fr-resolu-dns-gestion-sous-domaines-et-mail-sans-gestion-du-domaine-principal/4359 (in French)
[03:38:54]
<m606> the public IPv4 of your server
[03:38:55]
<Buny ✨> How would one find that?
[03:41:03]
<Buny ✨> And I would not be using Yuno for mail.
[04:04:00]
<m606> do you self-host or use a VPS ?
[04:04:49]
<Buny ✨> self host. Its a ThinkCenter sitting in my soundbar atm
[04:05:53]
<m606> so you should be able to find the info in your home router config
[04:09:18]
<m606> or you can run a command from the YNH server via SSH: https://www.cyberciti.biz/faq/how-to-find-my-public-ip-address-from-command-line-on-a-linux/
[04:12:34]
<Buny ✨> Hm...Looking in my router, I see
Network Access Enabled
Router Provision Mode IPV4
IPv4 Address [numbers ommited]
Default Gateway [numbers ommited]
Primary DNS [numbers ommited]
[04:12:35]
<Buny ✨> I ommited the numbers.
[04:12:38]
<m606> btw have you been trhough this https://doc.yunohost.org/en/category/after-installation ?
[04:12:44]
<m606> (your YNH server should first be accessible from outside your home network)
[04:12:50]
<m606> cf. port-forwarding
[04:12:54]
<m606> then I guess you have the IPv4 Address in above list with ommited numbers
[04:12:56]
<Buny ✨> I suppose so, though I tried to go to it and it timed out.
And I've been lookign around in my router for port forwarding and can't find that either. :/
[04:14:01]
<Buny ✨> So use the ipv4 address for dns?
[04:14:12]
<m606> yes, but if the server is not reachable from outside because port are not forwarded, that won't work
[04:14:13]
<m606> double check the router config, it should be somehwere
[04:14:18]
<m606> maybe the naming is not exactly the same
[04:14:25]
<m606> you can then test by accessing https://{your_IVP4_adress} it should bring you to YNH login page
[04:14:28]
<m606> in a browser I mean
[04:41:48]
<Buny ✨> Well, I tried changing my WAN from DHCP to static IP and it bricked my internet until I changed it back. Am I correct that one can avoid messing with port forwarding if they have a VPN? Because I have a mullvad account.
[04:50:48]
<Buny ✨> are there explcit instructions on how to set that up? I'm seeing using terminal. Which is fine, but I don't know how to access that on my ThinkCenter.
[05:09:04]
<Buny ✨> ...I'm not 100% sure its connected to the internet
[05:57:45]
<tufek> what gives you `ip a` `ping -c 5 1.1.1.1` and `curl https://ip.yunohost.org` ?
[07:00:37]
<Jens> > <@buny:nightcity.chat> Well, I tried changing my WAN from DHCP to static IP and it bricked my internet until I changed it back. Am I correct that one can avoid messing with port forwarding if they have a VPN? Because I have a mullvad account.
Hello!
1. You must know your external IP (the IPv4 address). It’s where you will point your DNS.
2. You should set the YNH machine to a static internal IP, this so you can easily forward traffic that comes to a specific port on your router to your YNH machine. If you’re using dhcp for the server it could change when restarting. In case you didn’t know, a dhcp server is what gives all your present devices an IP on your internal network and provides the correct settings for internet access. So in your router there are settings for your range of IPs your dhcp server can distribute. I recommend that you limit off a section you could have for static use. For instance, a normal range with a home router could be 192.168.1.1-192.168.1.255.
So maybe you’ll tell your dhcp to only give out addresses in the range of 192.168.1.50 - 200. This will give you a big range for devices. It also means you can assign static addresses from 2 - 49, and 201 - 254.
If what I’m telling you here seems like witchcraft, I recommend you to learn more about dhcp servers and how private subnets work.
3. As mentioned, you will need to find the settings where you can allow traffic from the external internet into your internal network. This is called port forwarding, but it can be called something else by your router. It could also be that your internet provider doesn’t supply a public IPv4 address since those are scarce these days and most users doesn’t setup external services.
These are all mandatory steps to understand before you install YNH and get anything going there. You could also just use it as an internal server on your network. Then you’d access it via the internal IP.
It could also be worth noting that ev3n if everything I mentioned is setup perfectly, it could be that you can’t access YNH by using the dns name when you’re on your internal network since the dns is mapped to your external IP. Not the internal one. But lets get to that later.
[08:28:15]
<Buny ✨> 100% fail rate and could not resolve respectively. What's odd is the internet worked with prior OSes and with installing Yuno.
[08:30:35]
<Buny ✨> I'll have to go through this later. Thank you though.
[08:32:26]
<Buny ✨> and thank you to everyone who's helped so far. ^_^
[09:24:32]
<rainer.szs> I'm sorry if i still ask but is there a way to load new books data into an older version of bookstack? I still don't know how to access my notes and the last backup from a working, older version is from 5 days ago
[09:42:12]
<miro5001> Can you create an issue in the repo of the package with details of what is not working with the updated version and how to replicate it?
[09:42:16]
<rainer.szs> I already created it but i'll update it with the steps to replicate it
[09:42:19]
<rainer.szs> I don't know the details of why it's not working
[09:42:20]
<rainer.szs> Now I'm reinstalling it and check if the problem is 2fa or the same error occurs with a fresh instance
[09:42:24]
<rainer.szs> https://github.com/YunoHost-Apps/bookstack_ynh/issues/234
[09:42:27]
<rainer.szs> the same happens with the newest version of bookstack
[09:43:55]
<rainer.szs> So, this has been written in the official bookstack documentation, should I test it?
[09:44:02]
<rainer.szs> https://aria.im/_bifrost/v1/media/download/ASxCZ20EKEwk8UWqp5CFe_ViM8xRRNRZnsNMMeMa-mzrmKYIIGDxvg1MF3OkrbciOknqu8Icm2XHXrQu1B_jiYlCecuDumkwAG1hdHJpeC5vcmcvT2ltaHdtdHBOblB2bnJCUlJpYkNEUm9G
[09:44:54]
<Jens> > <@buny:nightcity.chat> 100% fail rate and could not resolve respectively. What's odd is the internet worked with prior OSes and with installing Yuno.
The first command should give you your machines internal IP. So you should get a response there.
The second command is sending a ping to one of the root dns servers of the internet so verify you have internet connectivity. If not, it will return what you’re seeing.
The third command returns your external IP if you’re connected to the internet.
So this tells us your server isn’t connected to the internet. This could be because you don’t have the proper settings configured. You should start fresh by restoring your router so that your normal devices (computers, phones etc) work. Then use the list of tasks I gave you.
[09:54:51]
<rainer.szs> I'm trying to reset the password for my user but the arguments are supposed to be normal users with an email and an id. I tried both --id-0 and --id-1 assuming that admins have the first id assigned being the first user
[09:55:22]
<rainer.szs> Also the only user that can access to the library is me, so there are no other ids and passwords
[10:00:36]
<rainer.szs> I resolved the issue! Although it's a temporary fix
[10:00:36]
<rainer.szs> I'll update the issue with the instructions
[10:24:07]
<rainer.szs> miro5001: how can i share a system log? Do you mean yunohost > tools > logs?
[10:24:08]
<miro5001> Yunohost > tools > services > bookstack
[10:24:08]
<rainer.szs> oh my bad I read system and not systemd
[10:24:08]
<rainer.szs> thanks
[10:24:09]
<rainer.szs> I really hope it's not a problem that occured only on my side
[10:24:09]
<rainer.szs> GIve me some time please, since now i reinstalled bookstack and removed 2fa from terminal, I need to reinstall it and replicate the error from the older backup
[10:26:00]
<rainer.szs> Here's the systemd journalctl log from now (version 25.12.5)
https://paste.yunohost.org/uxelitekam
[10:29:32]
<rainer.szs> I updated the issue with the temporary fix of disabling 2fa, I hope it can help other people having the same problem
[17:43:09]
<orhtej2> > <@homelab-fr:matrix.org> Bonsoir à tous, est-ce que quelqu'un a essayé de faire la mise à jour de Piped (la version 2026.02.20~ynh2) car quand j'essaye de la faire j'ai une erreur et je voulais savoir si ici quelqu'un avait déjà eu le même cas svp ? Merci d'avance ! https://paste.yunohost.org/raw/ravijojose
Try again, stupid gradle refuses to close 🙄
[17:45:15]
<homelab-fr> i try 3 times but it s the same :-(
[18:03:23]
<orhtej2> > <@homelab-fr:matrix.org> i try 3 times but it s the same :-(
I've got nothing at this time 🙄 the latest update is stuck in ci hell rn
[21:16:54]
<Gwên> Bon ben des news de mon souci de dns : les différents trucs que j'ai tentés n'ont rien donné du tout.
Fermer les ports liés au serveur dns -> Aucun effet
Désactiver le bloqueur de pubs de ma box -> Aucun effet
Désinstaller SearXNG -> aucun effet
J'arrive un peu à cours d'idées :S
[21:16:54]
<Gwên> Le seul truc qui règle le souci c'est redémarrer dnsmasq *très* régulièrement
[21:16:57]
<Gwên> Mais c'est un peu relou de devoir le relancer une à trois fois par jour.
[21:24:36]
<m606> que disent les logs du service dnsmasq?
[21:26:47]
<m606> en attendant de comprendre la cause du problème, s'il y a une certaine régularité tu pourrais configurer le service dnsmasq pour redémarrer périodiquement (ça t'éviterait de le faire manuellement), cf. https://www.baeldung.com/linux/systemd-service-periodic-restart
[21:28:02]
<m606> en attendant de comprendre la cause du problème, tu pourrais configurer le service dnsmasq pour redémarrer périodiquement (ça t'éviterait de le faire manuellement), cf. https://www.baeldung.com/linux/systemd-service-periodic-restart
[21:31:02]
<@fanchthesystem:libre.bzh> J'ai pas trop suivi tes souci de dns, tu peux faire un resumé et aussi dire pourquoi tu utilise dnsmasq ?
[21:35:37]
<m606> le fichier du service est dans `/lib/systemd/system/dnsmasq.service`
[21:36:43]
<Gwên> Jusque-là je mettais un lien avec le log régulier du nombre de requêtes dns maximum dépassé (150), mais là je viens d'avoir de nouveau à le redémarrer et il n'y avait pas eu ça. En fait y a même rien eu dans les logs de dnsmasq entre les deux derniers redémarrages.
[21:38:44]
<Gwên> Par contre je vais suivre ce que tu m'as envoyé, ça devrait m'aider, merci !
[21:44:12]
<m606> et tu as des éléments de contexte plus précis de comment ces soucis sont arrivés?
[21:46:11]
<tao> ahoy there, i had to setup a linode cloud firewall due to a vicious DDOS attack, i allowed http/s both ways and my web services are acting as expected - yet on diagnosis internet connectivity i get "The server does not seem to be connected to the Internet at all!?". should i look for a tunnel somehow or what is best ynh way to go about it in general?
[21:50:44]
<Gwên> Pour le nombre de requêtes dns trop important, pas vraiment. J'ai remarqué que le serveur dns était exposé, donc j'ai fermé les ports correspondants. Mais ça s'est reproduit. J'ai désinstallé SearXNG, que j'utilisais, mais j'ai quand même de nouveau dû redémarrer dnsmasq trois heures plus tard.
[21:59:55]
<m606> a firewall located between the YNH server and the internet? I don't really know, but woudn't it be like configuring a router somehow, e.g. https://doc.yunohost.org/en/admin/get_started/post_install/port_forwarding/ ?
[21:59:58]
<tao> exactly what i did, and it works - just diagnosis doesn't think so
[21:59:58]
<m606> oh maybe you did already ("allowed https both ways")
[22:00:15]
<m606> Je connais mal cette partie de YNH, mais dnsmaq est apparemment censé pouvoir communiquer avec l'extérieur, si tu lui fermes son port ça pose sans doute problème:
> When a query arrives, dnsmasq checks its local cache first. If no match is found, it passes the request to an upstream resolver, such as Google’s public DNS. The tool also reads your system’s /etc/hosts file for local name resolution and responds to DHCP-configured machines.
source: https://commandlinux.com/arch-linux/dnsmasq/
[22:00:16]
<m606> from the YNH server are both of these commands working?
```
curl https://ip.yunohost.org/
curl https://ip6.yunohost.org/
```
[22:00:17]
<tao> i opened 53 for dns
[22:00:17]
<m606> (previous answer was for Gwen)
[22:00:18]
<m606> (latest is for you)
[22:00:19]
<tao> yep
[22:02:47]
<Gwên> Sur ce point le souci avait lieu avant mais y a eu quelques topics sur le forum yunohost à ce sujet
[22:03:02]
<Gwên> notamment sur le fait que le serveur dns avait pas de raison d'être exposé
[22:03:14]
<Gwên> Pour dnsmasq un ami m'a fait remarquer ça
>normalement y'avait un processuss de revert, pour revenir à leurs confs de départ
si ce bidule existe toujours, on ne sait jamais. enfin suffit de regarder la date de dernière modif, remarque
[22:05:59]
<miro5001> Don't open ports 53 and 5353 to the internet
[22:08:26]
<m606> isn't 53 open by default in Yunohost ?
[22:09:05]
<Chatpitaine Caverne> Yes it is.
[22:16:06]
<tao> opened on the cloud firewall - outbound 53 UDP, shouldn't i?
[22:36:46]
<m606> peut-être que tu devrais ouvrir un sujet sur le forum avec ton problème, sans l'historique c'est difficile de savoir dans quelle direction chercher
[22:36:49]
<miro5001> Dns ports should only be open for the local network.
[22:36:49]
<Gwên> Yep, je l'avais fait en mettant l'accent sur le nombre de requêtes dns mais j'ai eu zéro réponse
[22:36:58]
<miro5001> Opening them on a vps will blocklist the mail server as open resolver.
[22:37:07]
<Chatpitaine Caverne> ça pourrait être utile, en effet, car ce n'est pas un cas isolé. J'ai eu cela un temps aussi et je n'ai pas vraiment réglé le souci, ça c'est juste calmé. Et je ne trouve rien sur le forum concernant ce type de situation (ou j'ai mlal cherché).
[22:37:15]
<Gwên> Vu que j'ai pas mal élagué ça va me servir
[22:38:28]
<Gwên> L'un dans l'autre ça me rassure si ça signifie que c'est pas définitif :|
[22:38:30]
<miro5001> https://vercara.digicert.com/resources/port-53-ddos-attack
[22:38:57]
<m606> so withing YNH firewall you mean? but not router or firewall?
should this be changed to mention the cons of doing so?
> add YunoHost's local IP as DNS resovler in your router (usually in the DHCP section) and open port 53 (UDP) in YunoHost's firewall, making sure to not enable UPnP forwarding. (Do not open port 53 on your router)
source: https://doc.yunohost.org/en/admin/troubleshooting/noaccess#if-you-are-self-hosted-at-home-fix-ports-forwarding
[22:39:14]
<m606> @nomads-land:matrix.org so yes actually, as per Miro5001 explainations and what is actually written [there](https://doc.yunohost.org/en/admin/troubleshooting/noaccess#if-you-are-self-hosted-at-home-fix-ports-forwarding), UDP port 53 should be opened in YNH firewall (not UPnP though) but not in your Linode firewall
[22:40:56]
<m606> Well, I don't know for what reason @miro5001:matrix.org seems so categorical but as per the doc:
- you should try and see whether things works when only forwarding ports related to Web, SSH and emails (https://doc.yunohost.org/en/admin/get_started/post_install/port_forwarding)
- ~~and if it doesn't work (e.g. hairpinning issues), open UPD 53: https://doc.yunohost.org/en/admin/troubleshooting/noaccess#if-you-are-self-hosted-at-home-fix-ports-forwarding~~
[22:44:01]
<tao> thank you both:) on ynh firewall both 53 and 5353 ?
[22:45:01]
<m606> only UDP 53 (but it is opened by default I guess)
[22:45:52]
<m606> would that make a difference for the diagnosis ?
[22:46:24]
<tao> diagnosis still complains
[22:47:09]
<m606> err no, 5353 too (opened by default too on my server)
[22:49:38]
<m606> quelle est l'URL?
[22:56:09]
<m606> @nomads-land:matrix.org err no, 5353 too (opened by default too on my server)