networking

5 posts

technical

A Cheap No-Frills OPNsense box

If you're looking to build a small, quiet and cheap box to run OPNsense on then I have a build you might be interested in. This box has been happily running as my firewall since July 2019. I originally documented the build in this forum post over at serverbuilds.net but for posterity I wanted to record this information here too. Here's the build: Item Model Price in 2019 Approx 2023 price Notes Motherboard Intel DQ77KB $37 $50-60 Dual on-board Gigabit ethernet CPU Intel i3 3225 $29 $6

pihole

Using Pihole with pfsense or opnsense

Pihole is a network wide ad blocker. Using DHCP we can tell every device on your network to automatically and transparently use Pihole for DNS. But what if you have custom DNS entries in your firewall? I use OPNsense but this process largely transposes to PFsense as well. When your laptop makes a DNS request, it is sent to Pihole. Pihole performs a lookup and if it can't find the requested address, forwards that request on to the next DNS server in the chain. If OPNsense has that DNS record in

unifi

How to adopt a Unifi AP with a remote controller

A fresh out of the box Unifi Access Point has no idea what to do with itself. It starts scanning the local LAN for any controllers to 'announce' that it is here and needs configuration. But what about when your controller isn't on the LAN? Mine is running on a DigitalOcean droplet, for example. We need to tell the AP where the controller resides in order for the announcement to be successful. It's actually a relatively straightforward thing to solve but requires a few steps which I'll outline b

home assistant

Home Assistant External Reverse Proxy Setup with nginx

I run nginx as my reverse proxy of choice from the folks over at linuxserver.io with automated Let's Encrypt functionality. It plugs neatly into the 20 or so containers I run on my primary server VM and the thought of migrating over the in-built Home Assistant plus reconfiguring all my configs made me go weak at the fingertips. My fully Ansiblised home infrastructure is open sourced at github.com/ironicbadger/infra including all my reverse proxy configs I was running into an issue for a while