The biggest problem it that the "network" was set up as a default 'workgroup' on all the Win10 machines. They sign in with MS accounts and have a few shares set up on a workstation for general office files. They have to set the shares up with "everyone" and read/write for the permissions but have so much trouble accessing things. You can't use their MS account to give permissions because the workstations are not aware of the AzureAD account.

They have tried OneDrive and had a ton of issues with files being deleted or moved. I think using OneDrive as a "server" violates the TOS too. The entire setup is so convoluted. They don't even know how they set it up. When they did use OneDrive, they still shared the OneDrive folders on the LAN and browsed them locally.

A friend of mine started a company a few years ago. Someone convinced him to get the full O365 with AzureAD. He has a handful of employees and sharing files on the LAN is painful. Their PCs are not "joined" to AzureAD but their user accounts reflect this. Should they be joined? I don't use Azure and am trying to give him some pointers. What should I recommend to him?

I don't ever reserve IP for phones.

A friend of mine uses a similar platform for tracking and it uses plain http as well. Can't remember the name though.

@RojoLoco Nice. I love steak but have never had Wagyu.

Zerotier makes sense here. I've also deployed a Sophos SG Appliance (yes I know) at a small private datacenter and use their RED (Remote Ethernet Device) units behind cellular modems for branch offices on construction sites. Work extremely well and no issues. Use them for data and voip.

I think I found something that @JaredBusch might need....

A friend of mine uses NC to move data from remote users to a shared folder. Works fine. That folder syncs to a local folder on another file server via the sync client. The files are very small and lots of them. The sync client struggles due to have to make mysql database entries for each file (an assumption on my part).

The local server has a piece of custom software that looks at the folder and creates reports. Would mapping the folder via webdav be a better solution than having the data copied to the local drive? Is there a better option? Nextcloud has solved a lot of issues they were facing. This is an underlying issue. Thoughts?

Set up a simple IVR last night on FreePBX. It was far easier than doing the same on a Cisco UCS.

I have an Edgerouter with some public-facing services behind it. I added another public address to the eth0 interface and NAT rules. I can reach the services behind the router from the secondary WAN IP if I am not on the LAN. If you go to the public IP from the LAN, it brings up the login page for the router itself. I know there is a setting somewhere but I'm not having any luck. Do I need SNAT and DNAT combined to make this work?

Waiting for this evening to go pick up my brother from the airport and then a baseball game. Busy weekend too.

@Doyler3000 Cockpit seems to be the contender to replace virt-manager. Still lacks some functionality but getting better with each update.

Update:
I was able to get it working with a self-signed certificate and the functionality is great. I had NC connected to the OO server with https://localip That worked fine but once left my LAN, from the web it tried to resolve the local ip. That of course will not work and it does zero good to only work while you are on the LAN. I was unsuccessful at getting the self-signed cert to work behind nginx reverse proxy.
Is it possible to just have nginx forward http to the OO server and:

1. Allow Letsencrypt to verify and issue the certs
2. Actually function behind the proxy if the actual cert is on the OO server directly. I cannot find any good documentation of OO working properly behind the reverse proxy in the normal sense.

May need

public = yes

in the config if I remember correctly.

Installed Docker and killing time....

@JaredBusch makes sense. I’ll give it a try tomorrow.

I’ll have to take my test vm and put the cert directly on it and test the functionality.

@JaredBusch Understood. Just frustrating when all the other hosts I have behind a proxy work perfect.

I’m just afraid it would work ok with the document server running on the NC server (as a container) but not be able to keep up with heavy use. I have learned to keep workloads separate.

@JaredBusch I’m sure you are right. I can access the document server via https through the proxy with the current config. Nextcloud can connect to it https. There is an error however in the browser (when you open the developer tools and view the console) and the document content never loads. I am trying so hard to avoid installing Docker, podman, etc on the NC server.