Recently, I saw icanhazip.com pop up in my pFsense firewall logs. It was immediately blocked but the name piqued my interest, so I did a little digging which revealed an interesting backstory.
It's owned by Cloudflare:
spoiler
spoiler
...but it hasn't always been theirs: icanhazip: How a simple IP address tool survived a deluge of users. Pretty interesting, at least to me as I have never encountered it before.
I have it still blocked as nothing I'm doing seems hampered by blocking icanhazip.com's ip range. Anyone else ever encounter icanhazip.com?
I think I found the source of the icanhazip.com block. From the Github Issues page:
2025-03-27 17:00:02] production.ERROR: Failed to fetch external IP address. [“cURL error 60: SSL: no alternative certificate subject name matches target hostname ‘icanhazip.com’ (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://icanhazip.com/%E2%80%9D]
ETA: Solved
I think I found the source of the icanhazip.com block. From the Github Issues page:
2025-03-27 17:00:02] production.ERROR: Failed to fetch external IP address. [“cURL error 60: SSL: no alternative certificate subject name matches target hostname ‘icanhazip.com’ (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://icanhazip.com/%E2%80%9D]
AI DISCLAIMER: Yes I used AI in addition to a host of website resources to create this. If down voting 'AI anything' makes you feel better, then by all means do so.
PURPOSE:
WHY:
POSSIBLE FUTURE UPDATES:
Among the things I learned is that if your password to Navidrome has special characters such as $, then wrap the password in single quotes:
ETA: Forgot the prerequisites. You must enable these variables in your Docker compose or through Portainer or similar:
I'm including a pdf for the instructions and script because I can't seem to get Lemmy formatting to bend to my will. The link will take you to Mega.nz. If you are interested but Mega.nz is not allowed on your network, I can upload anywhere you want. Please scan the pdf before opening.
To the best of my knowledge, this will not cause your server to implode or explode. As with any code you find online, thoroughly examine it before deployment on a production server.
If anyone has a better way or other ideas, I'm willing to be schooled.
Have fun!
I think [AI] tags would be good. That way a certain subset of members could just drive-by downvote without getting themselves dirty. [NOT AI] seems redudant since we've already defined [AI], but again for quick filtering purposes, I see no harm in both.
Progress Report:
So, building on @captcha_incorrect 's n8n script he graciously offered, and pulling data into Grafana, and learning how to python correctly....it's been a journey. However, I am happy to report that I have some weather data now. It's by no means a finished product but I have made some progress.
spoiler
The extended forecast in the right hand side took me some time to figure out pagination so I could scroll through 5 days in advance. The weather tab at the top left will get a couple more tabs. One for forecast map, if I can figure that out. LOL
Is really Self Hosting?
I don't really get hung up on the nomenclature and definitions. If you run your services off of a VPS and call it selfhosting, more power to you. No skin off my nose. If you run your services off of a homelab rack that dims the lights whenever you power it on and you call it selfhosting, more power to you. If you're running your services off of an old repurposed, disposable vape unit, and you call it selfhosting, git sum. It's a big umbrella and we can all coexist without nitpicking each other. Gatekeeping is something I don't do, and it gets tiresome to hear others regurgitate the same trope over and over again.
ETA: @CallMeAl@piefed.zip, nice profile shot.
human-developed
Love the distinction. LOL
I posted this over at https://discuss.tchncs.de/c/navidrome, but I thought I'd post it here, maybe someone has had experience with this.
I've been noticing demo.navidrome.org showing up in my firewall:
pFsense:
abuseipdb.com:
As with anything entering or exiting my network, I am cautious and curious why my instance of Navidrome has the need to contact demo.navidrome.org.
I am running Navidrome as a Docker Instance. I have combed my compose file and can find nothing in that itself that would trigger Navidrome to 'call home'.
Is this for stats, or other? As of right now, I have demo.navidrome.org blocked until I've gathered some information.
BTW, sweet piece of opensource software. I tip my hat to the dev team(s).
My brother....I empathize with your situation. About 25 years ago, I fell from 2 floors up, landed on my skull on a concrete pad and lay there for an undetermined amount of time before someone found me. I suffered a TBI that has gifted me a seizure condition as well as other mental/neuro issues. The right, frontal lobe of my brain looks like a piece of wadded up, cotton candy. I've come a long way and I have far to go. I am fortunate and thankful to be alive regardless the situation.
and short term memory [loss]
I spent a week in the hospital after I had a seizure and it wiped my memory. I didn't know who I was, how to do even simple tasks, or who anyone else was either.
I use selfhosting and computers in general, to do the same thing as you. It keeps me thinking and trying to solve problems. I have problems expressing my thoughts, but the folks here have been patient with all of my silly questions and the occasional inability to grasp the information being presented here at lemmy/selfhosted. I don't watch TV, but I've found structure in reading, and I read a ton of info. I'm more into IT (obviously), history, etc but no fiction.
I truly wish you the very best bro. If I can ever be of assistance, I'm usually around somewhere. We can pair your brain with my .25 brain, and fix something. LOL
As I commented in another thread, I don't run 'arr anything, but I'm thankful that there are competent people who can make sense of all the code involved to do a proper audit.
I don't run 'arr anything, but that's pretty wild.
Yeesh, in the hour since this has been posted the developer has:
- Made the /r/huntarr subreddit private
- Wiped and deleted their Reddit account
- Deleted the GitHub repo for Huntarr
I decided very long ago not to pollute the gene pool, so everything dies with me.
ETA: It's comforting to know that 10 people agreed with my life decision. /s LOL
Open port 22
Wait 10 minutes
Prepare your anus
I find that people who say 'I've nothing to hide' haven't really thought it through. Mainly because, in most of the general public's mind, there is a disconnect between their daily lives and their online lives. Instead of being condescending to them, run through a couple of obvious scenarios with them:
Usually, running through daily things people do and contrasting them with privacy, security, and anonymity, I can get them to realize that yes, they too enjoy, nay, demand privacy, security, and anonymity in their daily lives, and that their online presence should not be any different.
The average Joe citizen really has no idea what goes on behind all those pretty pictures on their screen, and they could almost be forgiven for that. I've had a computer in front of me since the mid 70s and I openly admit, computers and networking are complex beasts. Even I have not plumbed the depths. Someone here made a comment once that if their knowledge was a 25' tape measure, they might know an inch, and I think that is applicable.
We, as the stewards of the secret knowledge, should not brow beat those who may be unenlightened. They are not sheep, they are not normies, they are not idiots. They just have no clue, so it behooves us to educate and assist those who do not understand, without making them feel like they're stupid. The more educated the populace, the further our privacy, security, and anonymity mission is spread.
(mostly illegal sports streaming sites)
This doesn't accomplish what the legislature intends. It never does. For instance, in the US, Texas in all their wisdom that can't keep an electrical grid running smooth without duct tape and bailing wire, has decided to 'ban' PornHub. It makes all the christofascist's dicks hard because in their mind, they have rooted out evil and destroyed it. (See Satanic Panic in the 80s) However, their weak, little minds cannot comprehend the fact that for every technology, there exists an equal, yet undoing technology.
Do it for the children I hear them say, and I would agree in this example, that children should not be viewing porn. A better solution would be to make parents actually parent. You brought a service into your home that can be both highly detrimental and highly beneficial, and then you turn around give it all, including a cel phone, to a very inquisitive mind uninhibited, unmonitored, and uncontrolled in any manner. You're the problem, not porn.
/end soapbox
Nice rack! I really like these small form racks.
This will become more and more common as we use AI to find vulnerabilities faster (hopefully) than bad actors can use AI to find vulnerabilities.