@Reid-Cooper said in ManageEngine ServiceDesk no longer unlimited technicians:

That's a common tactic. Make free customers keep thinking about the vendor and that they are getting something for free. VMware does that, too.

This is really not a big thing to me either.

Nevermind.

https://docs.requarks.io/wiki/administration/setup-nginx-reverse-proxy

Nice write up, thanks!

@scottalanmiller said in Traffic statistics for self-hosted WordPress:

Check out Matomo

I've also never been a huge GA fan.

Will check this out.

If you already have office 365, that would be the no brainer winner IMO.

I disagree with some of the others and say you don't even need SharePoint. One drive is fine IMO for what you need.

@aaronstuder said in Using SSL Wildcard Cert on Apache:

@JaredBusch said in Using SSL Wildcard Cert on Apache:

Along this line, if you setup LE with certbot and then setup a timer to renew it daily, you will never see this again.
If you use your wildcard cert, you will have to update it again when it expires.
But, that said, setting up SSL on Apache is not all that hard. Let me look for an example.

certbot renews wildcards as well using a DNS plugin.

https://certbot.eff.org/docs/using.html#dns-plugins

You don't always have to setup a timer, Ubuntu for example automatically sets up a cron job when the package is installed.

cron is being phased out

Cheap meaning low cost, of course.

@JaredBusch said in Exchange - best way to forward a shared address to two people?:

@Dashrender said in Exchange - best way to forward a shared address to two people?:

We have a user who has resigned. I need their email to go to two people, but I don't want to have to use a license to do it.

Do I create a contact, then forward the email to both internal addresses?

Thoughts?

Distribution group with the employee email address and then add those users as members of the group. done.

Others said it before you - but best explanation.

Thanks.

I just got a 2 year cert from NameCheap the other week. No issues at all anywhere, didn't even notice that cert was expired.

@black3dynamite said in Qubes:

I wonder if it works in a nested hypervisor?

Should work as long as nesting is supported.

@wirestyle22 said in Is it possible to force tag searches in addition to normal searching in Bookstack?:

@black3dynamite This is how to search. I want Bookstack to search for keywords and tags simultaneously, seamlessly

Then put in a feature request.

@scottalanmiller said in Ubiquity USG 3 Port with Centurylink Tecnicolor C-2100t:

That and removing the silly "modem" from the chain. It's direct now.

I asked that and didn’t get an answer.

@Obsolesce said in Converting a cron job to a systemd timer:

First some info as it may have impact on whether or not to do this in the first place:

I have a SaltStack deployment of 600-ish minions. Currently, I have a highstate set to run every 45 minutes via cron:

*/45 * * * * root /usr/bin/salt -b 25\% '*' state.apply

I know one of the benefits of systemd over cron is the logging, and I think this would be great to have better logging of when this runs. More can potentially be done with it automatically, like look for issues and send emails just as one easy example.

But I don't know how to test this... maybe it doesn't produce the kind of log I want, and salt may already do this in it's own log even better. Or maybe this will produce a log that's too big and cause issues later. I can watch it in the beginning either way, so it's fine.

Can that cron job be converted into a reliable systemd timer? If so, how?

600ish minions. Wow. Curious about your setup. (Types of systems, types of states, how to manage and review output of all of that, etc.” Maybe an upcoming post? 🙂

@scottalanmiller said in ADFS & Web Proxy Certificates:

https://irankon.wordpress.com/2017/08/01/azure-mfa-adfs-ssl-cert-with-lets-encrypt/

Definitely the way to go

@bbigford said in Synology-Storage Manager less than File Station:

Figured it out. Some backup software can create sparse files. File Station is reporting the size of data including sparse size, but Storage Manager is reporting only actual data on disk.

On Linux, this is often the difference between the output of df and du.

@jaredbusch said in Error While Updating Ubuntu 18.04 to 18.10:

Always reboot before doing system updates, IMO.

It was freshly powered up just to do the update. So it was.

@dustinb3403 said in Do you setup SSL for Intranet websites only:

Near-zero value in someone attacking is what I meant. Not a zero-value in what is provided by the systems. Also there is nothing confidential or needing "security" from a business perspective, which is why I ask is SSL worth it for these types of Intranet sites?

You need SSL for everything period. Even if it's a self-signed cert it's fine... just allow the exception in the web browser and be done, or use an internal certificate if your browsers are set to trust the root... or a domain wildcard cert would work just fine. It's easy to do.

You could set out a reverse proxy for use with Let's Encrypt, and use the reverse proxy for all of your internal-only web servers. On the reverse proxy, you can limit each site config to only pass internal IPs only. That's what I did for a few. For example, if you add this in:

allow 10.0.0.0/8; allow 172.16.0.0/12; allow 192.168.0.0/16; deny all;

It will not proxy anything unless it comes from an internal IP.

One of the examples in the article is that in a jury case, someone needed to explain 10% as meaning "one in ten". I think people who really get stats do this for everything in their heads all of the time - take anything and put it into the most meaningful terms. And I think those same people would be surprised to find out that other people do not do this.

@obsolesce said in Handling DNS in a Single Active Directory Domain Controller Environment:

@scottalanmiller said in Handling DNS in a Single Active Directory Domain Controller Environment:

@obsolesce said in Handling DNS in a Single Active Directory Domain Controller Environment:

@stuartjordan said in Handling DNS in a Single Active Directory Domain Controller Environment:

I believe the forest level with Samba can only be 2008R2 though.

If you're not using Windows AD, what's it matter?

If he's merging in DFS, it might. It's rare to do, but could matter.

Oh I see, so Windows AD and other services were involved at some point.

Depending on what you want to do, sometimes AD has to support it.

So what we are pretty sure we have narrowed it down to is a WiFi device that reports the temperature of the refrigerator to an online portal that sends out notifications when there is an out of range event.

There is an inside the fridge sensor and that sends the information to a receiver outside the fridge. The receiver part is what has the WiFi built in. I think the inside sensor to outside receiver communicate using 900 Mhz.

Who would have thought to check the refrigerator?