Nach dem Update eines Packages meiner OpenWRT-Installation war LuCi nicht mehr erreichbar – Loading view ….
Ja, die Philosophie von OpenWRT ist, kein Update von Paketen, wenn man nicht genau weiß was man macht und sich mit dem Change log des jeweiligen Pakets auseinandergesetzt hat.
Aber nun ja, ist nun mal so gelaufen. LuCi hat nicht mehr funktioniert. Glücklicherweise war aber SSH noch funktionsfähig, was es mit ermöglicht hat, alles in kürzester Zeit aus einem aktuellen Backup wieder herzustellen.
A Raspberry Pi located in the DMZ was not able to update its system date and time. The time was several minutes behind the real time.
This caused several issues starting with the login to a Nextcloud via two-factor-authentication, updates, etc.
The upgrade of an OpenWRT seems very difficult but it isn’t when you know what to consider.
Let’s Encrypt needs normally access via port 80 and 442 to the device that requests a certificate.
This article describes how to configure the necessary firewall rules.
Firewall, port forwarding, etc.? What and how should this get configured to make our services available?
This article describes describes exemplary how to make the necessary adjustmenzs to the firewall
The installation of the WireGuard server was successful accomplished on the OpenWRT device. Now connect your devices, so called peers, to your WireGuard server.
OpenWRT supports WireGuard! So why not use the VPN services on all your devices when you are not at home to use your own adblocker and other services you run on an OpenWRT device and have access to your local network.
The setup of the WireGuard server is not really difficult and straight forward.
OpenWRT can be configured to support encrypted DNS requests. The relevant software packages stubby and dnsmasq can be installed from the repositories.
OpenWRT offers an adblock tool and extensive block lists. It blocks adds on DNS basis like a Pi-hole. The service easy to install and to configure.
OpenWRT can use more than one DDNS service compared to a standard router. The setup is really easy.