Hiding Octoprint behind Pomerium and dealing with WebSockets

I run OctoPrint behind Pomerium. The actual configuration is somewhat irrelevant (although I’ll still paste it here) # Octoprint - from: https://octoprint.example.com to: http://192.168.169.170 allow_websockets: true policy: - allow: or: - email: is: me@example.com preserve_host_header: true but what you should know is that OctoPrint really likes its WebSocket and will refuse to connect without it. In the network console you’ll see attempts to connect to wss://octoprint.example.com/sockjs/123/random_string/websocket all returning 403 Access Denied instead of 101 Switching Protocols. Your ~/.octoprint/logs/tornado.log will tell you that ...

December 5, 2025

trakt.tv and Jellyfin: when tracking your shows goes wrong

I run my own Jellyfin server, as well as having a local OpenELEC (Kodi) for when I’m home, and use trakt.tv to keep my views in sync. While Kodi does a pretty good job at picking up when something is marked as watched on Trakt, Jellyfin does not, so I sometimes watch a show at home, and some time later I’m somewhere else wanting to watch the next episode on my phone, and Jellyfin will still be stuck at those “older” episodes I already watched at home. ...

November 27, 2025

NUT and USB UPSes

I just migrated my homelab to a new machine, and in the process I had to reinstall Network UPS Tools (more commonly known as NUT). In the process, I relearned why you need to make sure NUT is allowed to access USB devices, and how to do that. NUT is configured as a netserver to provide power information to all the machines that are connected to it. I backed up my configuration from my old server so, other than making a couple configuration tweaks, this should’ve been a piece of cake… ...

August 31, 2025

TPM2 auto-unlock of a LUKS-encrypted laptop running Debian

For a while now I wanted to make my Debian laptop’s LUKS encrypted drive auto-unlock with TPM2. Today is the day I try to do that: in and out, 20 minute adventure. tl;dr If you’re impatient and don’t want to know what I had to go through: Install dracut and tpm2-tools My initial lack of tpm2-tools is why this post is so long. If it doesn’t work, read through: you may be missing some Dracut modules. echo 'install_optional_items+=" /usr/lib64/libtss2* /usr/lib64/libfido2.so.* "' | sudo tee -a /etc/dracut.conf.d/tss2.conf Add tpm2-device=auto in /etc/crypttab (on your root partition’s line) between luks and discard (looks like luks,tpm2-device=auto,discard) ...

August 22, 2025

You have to start somewhere

I’ve been telling myself (and I’ve been told repeatedly) that writing a blog so I can remember: how I fixed whatever I broke, and what steps I had to go through to make computer do computer things would be a good idea. Well, I don’t have anything to write about today, but - unless something drastically changes in the near future - I probably will have something soon, so… Let’s do this. :) ...

August 20, 2025