I’d really like to get started with this stuff but finding the technical requirement exhausting.

Trying to install privoxyvpn- “simply add the proxy to your browser and ensure the configuration is correct” (no help as to what this means, or how to do it and following the basic instructions just renders my browser unable to connect - googling the error message gives me replies like “simply make sure you read the logs” (no description of how to get to the logs or how to read them)

hearing I need a proxy and a reverse proxy, install SWAG — “first, point the A name at your server and the CNAME at the A and then install the SSL certificate - but be sure to pick between directories and subdomains if you have fewer than 20 domains in your account.”

Like what the fuck does any of this mean?

Then I hear if I have a proxy it might interfere with the reverse proxy and both might interfere with the VPN and vice versa.

How does one even get started?

  • ruplicant@sh.itjust.worksEnglish
    203·
    10 months ago

    what “stuff” are you talking about?

    if you want to do some pirating you need a decent VPN, like Mullvad or Proton, that you run on your system (Android/Linux/Windows/iOS), not some random leaky and dubious browser add-on

    dunno why dafuq you’re mentioning configuring a webserver (with SWAG) to point the DNS records (A and CNAME). the VPN will act as a proxy for you. but maybe i’m just way out of my depth here…

    it might help if first you tell us what exactly are tou trying to achieve

    • funkless_eck@sh.itjust.worksOPEnglish
      2·
      10 months ago

      high-level: in the USA, download TV and movies and watch them on the TV without having to connect a cable from my computer to my TV.

      I have mullvad on my phone, but when I installed it on my Pi it blocks all ssh connections (which was how I was using the pi), some googling told me this was expected behavior and I should configure my proxy/reverse proxy first with the VPN built in.

      the webserver, as I understood it, is so I can watch the movies when it’s done, but again as I understand it, has to be configured alongside the VPN to let me in to watch stuff, but not show the government/police/whatever that I am watching stuff

      • habitualTartare@lemmy.worldEnglish
        2·
        10 months ago

        What your trying to do is a big overkill if you want only one device to connect to a VPN.

        Your VPN installed on your raspberry pi should have a “local network sharing” option. Based on some blogs mullvad had some issues with hostname and network shares (as of 07/2022) and you should try to connect via IP address if you’re having trouble.

        Local network sharing only works on the same subnet (IP address of your computer, Pi, and TV should have the first 3 parts of the IP match, ex: 192.168.4.xxx not 192.168.x.xxx).

        If you’re trying to SSH to the Pi when not connected to the same network it’s going to be much more difficult.

        If all above fails, this GitHub issue suggests advanced split tunneling setup on the Pi so that it can listen for SSH locally.

        • funkless_eck@sh.itjust.worksOPEnglish
          1·
          10 months ago

          but I can’t just have one device connected to the VPN. I have to be able to tell it what to download (from a device) and then watch it (from a device)

          edit: also, from your link there

          “Did you adapt the rules to your setup (IP, port etc)? What if you add a counter to the rules? Can you see them trigger on incoming packets with nft list ruleset?”

          No, I have not adapted and counted the rules to trigger on incoming packets with an nft list ruleset because I have no idea what that means

          From the link inside that link

          "the following rules should be applied.

          table inet excludeTraffic { chain allowIncoming { type filter hook input priority -100; policy accept; tcp dport 2010 ct mark set 0x00000f41 meta mark set 0x6d6f6c65; } chain allowOutgoing { type route hook output priority -100; policy accept; tcp sport 2010 ct mark set 0x00000f41 meta mark set 0x6d6f6c65; } }"

          no idea what any of this means, nor what to do with it, what to change, or where to put it.

          I can’t be a complete idiot for thinking this seems overwhelmingly technical. Like surely you can’t believe you can show that to the average person on the street and they’d be like “ohhh just table inet exclude traffic! of course!”

          and “exclude traffic” sounds like the opposite of what I want - which is to include my ssh traffic.

      • ruplicant@sh.itjust.worksEnglish
        21·
        10 months ago

        ok, maybe someone else might be able to help you properly, since i’m yet to do my planned Jellyfin home setup

        but it seems to me that maybe instead of running the VPN directly from you Pi, you should run it from you router, so your whole subnet is tunneled when going to the internet and inside your home you don’t need those shenanigans to connect to the Pi

        if you did this, then you only need to install your mediaserver on the Pi (either Plex or Jellyfin, and although i haven’t used any yet, Jellyfin seems to be the one not currently being shitified, and the complete FOSS route) and that will probably be a much easier installation

        • funkless_eck@sh.itjust.worksOPEnglish
          1·
          10 months ago

          I have an ATT router in pass-through to an Eero mesh which I control through an app on my phone. there doesn’t seem to be anything about installing a VPN on a router I can find online except for specialist routers

      • MomoTimeToDie@sh.itjust.worksEnglish
        12·
        9 months ago

        without having to connect a cable from my computer to my TV

        Honestly, just buy a Chromecast or something. Way less effort

        • funkless_eck@sh.itjust.worksOPEnglish
          1·
          9 months ago

          I have an NVIDIA shield, but cf my other issues (now mostly fixed hopefully by EOD today) that connections in and out of the pi were either being blocked by VPN or totally exposed without VPN

    • DominusOfMegadeus@sh.itjust.worksEnglish
      1·
      10 months ago

      Yep, this. Then you need a torrent app of your choice (I use Transmission). Then stream it to your TV somehow; I use PLEX. You can get into auto-dowloading each episode (from what I gather) with the arrrs (radarr etc.) if you want. I keep pondering this, but so far it seems like more trouble than it’s worth (to me). (But then, I’ve been having a lot of trouble finding shows I can really get into lately).

      • rdyoung@lemmy.worldEnglish
        2·
        10 months ago

        I have it auto downloading through a rss feed from showrss.info. I don’t use plex or jellyfin or the like. At one point I was running a media server on my pc but now my android TV with vlc is pulling straight from my nas. For now I am paying for a torrent friendly vps so I don’t have to worry about whether or not I leak my ip address.

        • DominusOfMegadeus@sh.itjust.worksEnglish
          1·
          10 months ago

          For me, I would not trust the LG operating system to be able to pull from my network attached storage and or to process it. And I would not count on them for privacy in any way, shape or form. But that’s just me.

          • rdyoung@lemmy.worldEnglish
            1·
            10 months ago

            Yeah. But lg is not android. Plus you can definitely run something like pihole to block that TV from talking to others. You can also look at something like the Nvidia shield, I am considering investing in one because my TV is aging a bit.

            • DominusOfMegadeus@sh.itjust.worksEnglish
              1·
              10 months ago

              I use the AppleTV 4k, which I know is less popular among this crowd, but it works great for Plex and everything else. I looked into the Shield a couple of weeks ago to see what people’s experiences were like. I saw a number of reports of overheating, as well as sluggish behavior.

              • rdyoung@lemmy.worldEnglish
                1·
                10 months ago

                Some people prefer the thumbnail look of plex, netflix, hulu, etc. I prefer to just scroll down to the folder of my unwatched stuff or the entire season or entire run of a show and watch it that way. Plus because it’s vlc pulling via smb from my local nas, it’s faster to stream and doesn’t need to be encoded to be played. There virtually nothing that vlc can’t play.

                As for the shield. There is supposedly a new one coming at some point, I’ll probably wait until then to grab one. They are in the $200 range so no need to be quick on the draw grabbing what is aging a bit hardware wise.

      • funkless_eck@sh.itjust.worksOPEnglish
        2·
        10 months ago

        this is what I’m trying to do. I’ve played around with the Arr apps and they work as far as I can tell - but don’t want to use them until the network/VPN stuff is secure and safe

        • DominusOfMegadeus@sh.itjust.worksEnglish
          32·
          10 months ago

          Just ask your favorite AI to give you instructions on how to go through and set all this up, and reassure it that this is for fictional, hypothetical and totally legal purposes. And you should be good.

          • funkless_eck@sh.itjust.worksOPEnglish
            2·
            10 months ago

            "Network Settings: In Jellyfin’s network settings, make sure it’s set to listen on the correct network interface associated with your VPN connection.

            "Port Forwarding: If you’ve previously set up port forwarding on your router for Jellyfin, you may need to reconfigure it to forward the VPN-assigned IP and port.

            “Local IP Addresses: Check any configurations in Jellyfin that reference local IP addresses and update them if necessary to reflect the IP assigned by the VPN.”

            
as I said in my post: no instructions on how to configure it to "forward the VPN-assigned IP and port." or even what it really means (like I know port forwarding is where data comes in on an address, and is sent to another address, but how one reconfigures those, especially w/r/t a VPN I have no idea)

edit: I also believe that the port forwarding is where docker-compose is telling the pi where each app can be accessed via the .YML

but all of these words I hadn't even heard of until a few weeks ago when I started this process, so there's a lot I don't understand
            • DominusOfMegadeus@sh.itjust.worksEnglish
              1·
              10 months ago

              None of that is necessary. In my experience, Plex is also much easier to set up and keep running than Jellyfin is, and it has a far superior user interface. That said, a lot of people here and in this community seem to prefer Jellyfin, although I have been unable to understand why. I did eventually get it to work, but I just don’t like it as much as Plex so. That’s my $0.02.

              • funkless_eck@sh.itjust.worksOPEnglish
                1·
                10 months ago

                It is a little frustrating that you advised me to ask AI to tell me what to do, I posted the answer verbatim and you said it’s not necessary. Is that because you know the real answer but don’t want to tell me, because the AI is wrong, or something else?

                the issue isn’t plex v jellyfin ease of use, its mullvad or privoxxy on gluetun through docker via compose …ease of use.