@scottalanmiller said in Smart Home Systems - Opinions on TP-Link Kasa:

Has anyone looked at or used TP-Link Kasa smart home gear? Wondering how good it is, how the apps work. Works with Alexa, which is a requirement for us. Seems like a good value.

https://www.tp-link.com/us/home-networking/smart-home/

I use them extensively throughout my house with Alexa. I have 10 of the HS200 and 8 of the HS100 and HS105 plugs. They only work on 2.4Ghz wifi. Have had the odd random disconnect but they're pretty easy to reconnect.

Only thing is that if you use Ubiquity AC access points, you'll need to log into the Unify manager to disable 5Ghz band otherwise they're a bitch to connect.

@black3dynamite said in Wordpress Install - Page is trying to load unsafe script:

@NashBrydges
Change
CustomLog /var/log/access.log combined
to
CustomLog /var/log/httpd/access.log combined

Good catch. Thanks.

If you need lots of storage, out of this group, the R510 would be the logical choice. 12 x 3.5" HDDs can get you a ton of storage. This is the one I use in a very similar config for my Veeam backups. Sure it's going to be more power hungry than the R710 or R320 but it's not that much worse.

Since the R710 is also likely the LFF version with 6 drives, that's only half the available potential storage for exactly the same performance (from the server components) so again, if the choice is between the R510 or R710, I choose the R510.

The R320 is only 4 Drives for storage but much newer.

Other factors to consider...

• Assuming none of these have warranty? If so, that's moot.
• How much backup storage do you need?
• If you truly don't care about the extra 1U of rack space or not.

If I was picking, I'd go with R510, if these are my only choices.

I finally figured out where this install went wrong.

When running this command sudo -u apache wp core download I was getting this error:

Downloading WordPress 4.9.4 (en_US)...
Warning: Failed to create directory '/usr/share/httpd/.wp-cli/cache/': mkdir(): Permission denied.

Once I manually created the folder and re-ran the commands right through to the end, everything worked as expected. Now the blog loads as a subfolder to the main site and doesn't have any issues with HTTPS warnings of any kind.

@jaredbusch said in HTTPD Fails To Start On Reboot Fedora:

@nashbrydges said in HTTPD Fails To Start On Reboot Fedora:

@black3dynamite said in HTTPD Fails To Start On Reboot Fedora:

Was bookstack working before the reboot?

It was working. Only after reboot did it screw up.

@black3dynamite he probably has not rebooted since the first install which he did prior to me fixing the log file error.

Yup. You are correct.

@black3dynamite said in HTTPD Fails To Start On Reboot Fedora:

Was bookstack working before the reboot?

It was working. Only after reboot did it screw up.

Yep, that was more useful. It was the same issue that Jared had had with a misnamed access.log file instead of access_log file in the conf file. Fixed the correct file name and all is well in the world again.

I'm still pretty new to Fedora and this is an error I've never seen before. After rebooting the server (there was no other action other than a reboot), I get the following error:

   Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
  Drop-In: /usr/lib/systemd/system/httpd.service.d
           └─php-fpm.conf
   Active: failed (Result: exit-code) since Wed 2018-03-21 16:33:14 EDT; 7s ago
     Docs: man:httpd.service(8)
  Process: 1498 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND (code=exited, status=1/FAILURE)
 Main PID: 1498 (code=exited, status=1/FAILURE)
   Status: "Reading configuration..."

Mar 21 16:33:14 bookstack-fedora systemd[1]: Starting The Apache HTTP Server...
Mar 21 16:33:14 bookstack-fedora httpd[1498]: AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using fe80::c644:b17d:61d2:109c. Set the 'ServerName' directive globally to suppress this message
Mar 21 16:33:14 bookstack-fedora systemd[1]: httpd.service: Main process exited, code=exited, status=1/FAILURE
Mar 21 16:33:14 bookstack-fedora systemd[1]: Failed to start The Apache HTTP Server.
Mar 21 16:33:14 bookstack-fedora systemd[1]: httpd.service: Unit entered failed state.
Mar 21 16:33:14 bookstack-fedora systemd[1]: httpd.service: Failed with result 'exit-code'.

I'm guessing the primary error is this:

Mar 21 16:33:14 bookstack-fedora httpd[1498]: AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using fe80::c644:b17d:61d2:109c. Set the 'ServerName' directive globally to suppress this message

So I know there is a commented out "ServerName" in /etc/httpd/conf/http.conf so I set it to "localhost" but on reboot, Apache won't start. I tried 127.0.0.1, same error.

Is there somewhere else this global server name needs to be set?

@black3dynamite said in Nextcloud 13.0 to 13.0.1 Upgrade Failing:

setenforce 0

Now I feel silly. Thanks That worked. Switched back to setenforce 1 afterwards.

Thought I'd test my ability to upgrade now thet Nextcloud is running on Fedora but getting this error using the updater:

Here are the folder permissions:

drwxr-xr-x.  2 apache apache    43 Feb  5 19:38 updater

Just for fun, I changed permissions to this temporarily and it still failed.

drwxrwxrwx.  2 apache apache    43 Feb  5 19:38 updater

Any clues as to what I'm not getting?

@black3dynamite Here is what it looks like at the Gmail end (personal details obfuscated).

@black3dynamite said in How to receive e-mail alerts from internal devices:

To have postfix relay to Office 365, you would need to setup postfix to use TLS.

If you are using Fedora make sure you have these packages installed:

sudo dnf -y install postfix cyrus-sasl cyrus-sasl-plain mailx

Installing cyrus-sasl and cyrus-sasl-plain is needed if you want to configure postfix to use TLS.

Start at the section where it talks about configuring postfix to use TLS.
https://gordan.jandreoski.me/how-to-configure-postfix-relay-to-office365-on-ubuntu-14-04/

For Postfix to enable TLS, all you need to add to the main config file is this line:

smtp_tls_security_level = may

Email headers confirm that emails are encrypted. I've checked on Gmail as well as my Office 365 email.

@tim_g said in How to receive e-mail alerts from internal devices:

@zachary715

I'm doing the same thing (also on a .local) using an O365 relay server. It's a Windows Server set up to be an SMTP relay for O365.

If you fire an email to it, it'll relay it to O365, and send as whatever "from address" you use, so long as the SMTP Relay account is able to send on behalf of that email.

What I do, is set up an O365 security group for each email I want to send as.

Example:

• Set up a security group in O365 and set the email to [email protected]
• Give the "smtp relay" account permission to send as/send on behalf on the above.
• Use that email as the "from address", and poing yoru server to the SMTP relay server.

I haven't done it on Linux, so I'm completely unfamiliar with that, but I can walk you through setting it up on a Windows Server using the built-in components (it uses IIS), if you go the Windows Server route.

That works for those devices that can self-authenticate via an actual account on Office 365. That works for my Sophos XG UTM for example but not for the majority of Linux servers I'm running.

@black3dynamite said in How to receive e-mail alerts from internal devices:

In the /etc/postfix/main.cf file, the following would need to be changed:
inet_interfaces needs to be changed from localhost to all
mynetworks should include the networks or hosts that will be accessing your postfix server.

I've also added my fixed IP address to the SPF record in Office 365. I discovered a while ago that without this, emails eventually get blocked as unauthorised to send on behalf of the domain I was using.

Yeah, I'd love to use a single email relay. I've just been setting up each server with Postfix but that's inefficient. Would love to direct all device emails that can't autosend via Office 365 through this single relay. A how-to would be ideal. I was searching for this very thing here a couple days ago and couldn't find anything.

@scottalanmiller said in Remote FreePBX Extension:

@nashbrydges said in Remote FreePBX Extension:

The Plan:

• User will have a NUC that stays on all the time
• Setup a DDNS domain for the user
• Install a DDNS update client on the always-on NUC to update IP address as needed

What is all of this needed for? This is a lot of infrastructure for an unknown purpose.

All of this is to enable locking the firewall access. Otherwise all I have to work with is a dynamic IP. With the DDNS setup I can restrict ingress from that registered IP.

I'm about to setup my first remote FreePBX extension and wanted to see if there are any better recommendations than what I'm about to implement. Here's the setup...

• Remote user has dynamic IP address (home internet)
• Remote extension is required for handling emergency calls outside regular business hours so user wouldn't always be sitting at a desk (making a softphone less useful and less desirable)
• Network tests suggest that their home connection offers very low latency and should be more than good enough to support a remote VoIP extension
• FreePBX hosted internally at the office
• Previous attempts to use a VPN to connect the remote user to the office resulted in very spotty performance and ISP has been totally useless in helping diagnose problems. Even though they do not block ports, they offer zero support for figuring out issues and there are no other ISP choices at this user's home. We ended-up running Apache Guacamole for remote access.

The Plan:

• User will have a NUC that stays on all the time
• Setup a DDNS domain for the user
• Install a DDNS update client on the always-on NUC to update IP address as needed
• Use firewall to restrict access to that DDNS domain

This seems like the most appropriate approach for this user but I wanted to see if anyone had any other suggestions.

As a secondary question, how do you secure a remote extension if user only has dynamic IP, for example, app on a smartphone.

@coliver said in Delete All Emails From Single Folder Office 365 Powershell:

Is he using the web interface?

If he is you can right-click on the folder in question and click "Empty Folder" or "Delete All".

Well I'll be damned! Never even knew that was a thing. Thanks, will get him to try that.

I have a client who, when he setup his website, enabled Fail2Ban however decided that he wanted to receive an email for every ban as the default ban action. Needless to say, he now have over 300k emails sitting in this single folder in an otherwise active email inbox.

My Google-fu seems to be failing me this early in the morning. Does anyone know if there's a way I can delete all emails from that single folder without affecting any other emails in any other folders for this one single user? He's using Office 365, no on-premises Exchange.

@aaronstuder I haven't yet had time to set anything up for testing using Caddy. Have you?