We (our family) have been using VNPT as our primary ISP for years. They are the largest ISP in Vietnam and generally we have been happy with their services. That rapidly changed during the last year.

Here’s my list of complaint with VNPT:

• Unreliable Connection: constant disconnection and inability to access the CDNs of some of the most popular websites including Shopee, Facebook, TikTok (as of Mar 2023, only Shopee is still affected, and mostly during night time). This started to become a problem around Covid19 lockdown time, they probably had a customer base explosion and their infrastructure couldn’t keep up. I get it, but 2 years? Letting that lasting as long as it does is a clear sign of incompetency.
• Website Blocking: so they have this habit of straight up disabling access to certain websites, completely without their customer’s consent. I don’t have a comprehensive list of blocked websites but it include most of the pornographic websites like Pornhub, Xvideos etc. which I guess can’t be helped because they were mandated by the government (FPT also blocks these). But they also block 2 websites that doesn’t serve any adult content at all: Medium (where most of the UX editorial articles reside), and most recently, Behance (where people come for UI showcases when Dribbble shots don’t cut it). Naturally, you can see why I, as an UI/UX Designer, would have a major problem with this. I don’t want to have 1.1.1.1 running at startup just because I’m using a pussy ass ISP.
  Now to be clear, FPT doesn’t block Medium and Behance, I have checked. And yes, I am aware that the lawmakers who are responsible for these blocks are incompetent short-sighted pieces of shit but remember, it was us (the people), who allow these people to hold these positions. So in the end it’s essentially our fault. My expectation for government officials of a developing country like VN was already extremely low to begin with but…holy shit.
• Shit Equipment: VNPT provided a 2-port modem on their first installation. Yep you read that right, 2-fucking-port excluding the WAN port. You can plug in a computer and a NAS and…that’s about it. You can of course phone up customer support and ask for a 4-port version, which I did, but com one. If they’re gonna cheap out on end users like that, what else are they cheaping out in the back? Perhaps that’s why their connection keeps going on and off intermittently. And also, the firmware on these modems though, holy shit I’ve probably haven’t seen such shitty software since the 90s, perhaps because they were probably made during that time. The UI and UX was straight up 90s-esque. They were ugly as shit and unintuitive to use. Took me way too long (and a lot of help from the WiFi community group on FB) to figure out which part do what. Who the fuck refer to port forwarding as ‘virtual server’ really?
  Anyway by the time I switched to FPT, the WebUI console of the VNPT modem has become completely inaccessible. Some kind of SSL error blocks access to it completely. I could probably phone up customer support for the 100th time and let them send another technician my way. But I’ve decided the next time I’m picking up the phone and calling them, it’d be for informing them that I’m dumping them.

For reference, for the same price I’m paying ($10/mo) I’m getting more or less the same speed (150Mbps) on FPT but with a free Android box and a subscription to their TV service FPT Play. (VNPT also has MyTV, but it doesn’t come with the internet package). This puts FPT values way above VNPT even for the base package. But things start to get interesting once you get to the next package tier. For an additional $2/mo, FPT buffs your downstream speed all the way to Gigabit! That’s absolutely crazy.

So in the last 2 short months I’ve subscribed to:

• Voicemod (lifetime)
• FaceApp
• NextDNS
• Midjourney
• ChatGPT+
• FPT Play
• VieOn (basically means suscribing to K+ and HBO Go also)

And that is on top of my existing subscriptions:

• Netflix
• Adobe Creative Cloud

I need help.

Just learned that my mom got diabetes today.

I know it’s not like cancer, but still, why does it get me down so much.

Old age are catching up to us all.

It is no secret that I am a major self-hosting fanatic, but people have been asking specifically about what it is that I host my home “server” (which is a glorified term really, it’s only an old Pavillion laptop running a 4th gen core i5 and 8GB of DDR3 memory). Still

1. Authelia (Authentication and Authorization gateway)

Authelia is an authentication gateway. You only need to sign in once and you’ll get access to the whole server, but it’s not really SSO. You still need separate accounts for their respective applications. Still, having an additional layer of security in front of your services does provide peace of mind, especially when you combine it with Duo Security as a MFA method.

2. NGINX Proxy Manager (Reverse proxy)

There’s many reverse proxies out there, like Traefik and Caddy, which is actually what I started it. But I choose NPM due to its simplicity. Sure Traefik and Caddy may offer more fine tune controls and is more suitable for power users, but NPM just works™ with minimal configuration. It also handles SSL (via Let’s Encrypt) and its default configuration covers most of my need.

3. Jellyfin (Media Server)

This is it, this is what sent me down this self-hosting rabbit hole. Those who followed me would remember that I run a small movie club called Phimhub, and I started out with a WordPress website much like namvu.net, that listed (NOT hosted) a number of interesting movie titles for our group. Much to our dismay Google, in their infinite wisdom, decided they didn’t like the site and axed my account (no specific reason given). So I did what any reasonable person would do, and host my own media server, with blackjack and hookers.

Read More

As you may know, I run a little movie club, which started out as a Netflix group buy a year ago, which later led to me setting up my own Netflix (with Jellyfin) eventually leading to me going down the /r/selfhosted rabbit hole, learning a ton of stuffs about personal server deployment along the way.

It served us well, albeit with some annoyances. For starter, it only runs from 8am to 11.30pm everyday, mainly because I hosted it from my personal desktop, which is only powered on during those period. Another drawback of running it from my personal PC is the lack of space. I only had a single 3TB HDD installed, and Phimhub’s library had long exceeded that. I tried to work around it by using Google Drive File Stream (now simply known as Google Drive) to keep only a fraction of the files offline, and leave the rest on the cloud. This effectively means that only around 30% of Phimhub’s library was ready to play at any time.

Well, today I’m proud to say those annoyances should be gone. I’ve finished building a DIY NAS running Xpenology with a whopping 64TB of storage (2x WD Ultrastar 16Tb, 2x Seagate Exos 16Tb, all enterprise class, datacenter ready drives). I’ve also procured a more powerful laptop to act as the resident server, hosting every single services in one place (containerized of course). A bump from N3060 to an i5-4200M means now I can move Jellyfin to the laptop itself instead of running it from my PC. While the i5 does consume quite a bit more power than the Celeron (37w vs 6w), but it’s still better than running my power hungry desktop PC for 16 hours a day for sure.

Essentially, instead of hosting Jellyfin AND the media library on my own PC, now Jellyfin will be moved into a docker container on my laptop server, and the media library will reside on the family NAS. You do need to mount the SMB share as a local mount on your server of course. One drawback of this approach is that you can no longer delete media from the Web UI, since I didn’t give the docker container write permission to the SMB share. I could do that but I figure it’s better this way, since I’ll be the only one managing the media files anyway, I can just do it from my local computer.

Reddit knows!

I was gonna post this on my Linkedin by decided against it, trying to keep it professional, ya know.