Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
uhhhhahhhhohahhh
Oct 9, 2012
I use Caddy2 as a reverse proxy for Jellyfin, with basic auth. You don't get enough domains on DuckDNS to subdomain all the other things that are running.

I plan to replace it with Traefik as the reverse proxy at some point, and use Authelia for MFA and move Sonarr/Radarr etc. to folders so I don't need subdomains and can auth to all of them with just one login. This guide is specific to Traefik/LE/OAuth: https://www.smarthomebeginner.com/traefik-2-docker-tutorial/

This guide covers basically everything, but it's focused on using Docker: https://www.smarthomebeginner.com/docker-home-media-server-2018-basic/

Otherwise, I use the OpenVPN server on Xpenology, which gives me access to things like Sonarr and Radarr if I'm out and need them

Adbot
ADBOT LOVES YOU

Bank
Feb 20, 2004
I feel like every few months I have to do a cleanup on my Sonarr/Radarr/SABNZBD setup. Yesterday I spent 30m horsing around because my HTPC restart automatically for a Windows 10 update, and because it didn't login to Windows none of the startup apps got kicked off. Then I saw I couldn't login to anything and had to reset the passwords. Then I saw the port number on the machine changed, even though I told my router to reserve it for that MAC address.

All in all it was a huge PITA and I didn't realize things were broken for so long..I effectively lost 1 month of downloading and afraid to kick it off again as the backlog is pretty huge (1TB bandwidth limit here).

So 2 questions:

1) Is there a way for me to tell W10 to stop restarting for any kind of update? I'm pretty sure I downloaded some tools to prevent this, but for whatever reason I run into this every month or two. Things like MSFT Edge get re-installed and plastered all over the place, and after logging in it tells me to set some kind of system settings up (I honestly forget what). I get there are some security updates and such that I absolutely should install at some point, but given I don't put anything personal on this machine I don't mind waiting a few days. It just seems like W10 is force-installing stuff on my behalf.

2) Is there another way for me to track when these things die down? I presume there should be another way to be alerted that my port changed or something and SABNZBD can tell me other than having to login to the UI?

Bank fucked around with this message at 02:50 on Dec 17, 2020

Super-NintendoUser
Jan 16, 2004

COWABUNGERDER COMPADRES
Soiled Meat

Matt Zerella posted:

Don't. Set up WireGuard and VPN in.

Heyo since we argued all night at work I'm gonna follow you to SA and argue here. :cheers:

I use traefik with a public domain, served over https with LetsEncrypt. I also have all my sites protected with Google oauth. So if you go to https://www.mysonarr.com you get a Google 2fa login prompt. I have a white list of google accounts that it lets login. It works super well, and I guess it's secure enough.

Matt Zerella
Oct 7, 2002

Norris'es are back baby. It's good again. Awoouu (fox Howl)

Jerk McJerkface posted:

I use traefik with a public domain, served over https with LetsEncrypt. I also have all my sites protected with Google oauth. So if you go to https://www.mysonarr.com you get a Google 2fa login prompt. I have a white list of google accounts that it lets login. It works super well, and I guess it's secure enough.

Sure, but if they’ve got a static ip that’s half the VPN problem solved. WireGuard is super fast and connects almost instantly. Of course, if your internal network is on a common default subnet, this is all moot.

I use traffic too to server Ombi up to friends and it works great (the LE integration and ability to add dockers with labels owns), it’s also serving out my gitea server. I love it. But VPN is still the most secure way to access stuff remotely if it’s just for you.

in a well actually
Jan 26, 2011

dude, you gotta end it on the rhyme

Tailscale if you want both Google auth and wireguard with very little setup. They’re doing some cool things.

Matt Zerella
Oct 7, 2002

Norris'es are back baby. It's good again. Awoouu (fox Howl)

PCjr sidecar posted:

Tailscale if you want both Google auth and wireguard with very little setup. They’re doing some cool things.

Woah, this is awesome, thank you!

Rooted Vegetable
Jun 1, 2002

Jerk McJerkface posted:


I use traefik with a public domain, served over https with LetsEncrypt. I also have all my sites protected with Google oauth.

How well does that work with nzb360 or LunaSea? I've stuck with http auth (using https and LE before anyone shouts) to maintain compatibility

The Diddler
Jun 22, 2006


Bank posted:

I feel like every few months I have to do a cleanup on my Sonarr/Radarr/SABNZBD setup. Yesterday I spent 30m horsing around because my HTPC restart automatically for a Windows 10 update, and because it didn't login to Windows none of the startup apps got kicked off. Then I saw I couldn't login to anything and had to reset the passwords. Then I saw the port number on the machine changed, even though I told my router to reserve it for that MAC address.

All in all it was a huge PITA and I didn't realize things were broken for so long..I effectively lost 1 month of downloading and afraid to kick it off again as the backlog is pretty huge (1TB bandwidth limit here).

So 2 questions:

1) Is there a way for me to tell W10 to stop restarting for any kind of update? I'm pretty sure I downloaded some tools to prevent this, but for whatever reason I run into this every month or two. Things like MSFT Edge get re-installed and plastered all over the place, and after logging in it tells me to set some kind of system settings up (I honestly forget what). I get there are some security updates and such that I absolutely should install at some point, but given I don't put anything personal on this machine I don't mind waiting a few days. It just seems like W10 is force-installing stuff on my behalf.

No. I mean, technically, you can spin up an AD domain and WSUS, but that would also require W10 enterprise for those settings to actually apply.

Bank posted:

2) Is there another way for me to track when these things die down? I presume there should be another way to be alerted that my port changed or something and SABNZBD can tell me other than having to login to the UI?

I would start by making sure everything is installed as a service, and make those services start on boot. The next step would be monitoring of some sort. The simplest would be to just load each page every day to see if they're working. If you have a second computer available, you can set up something like PRTG to watch either the web pages or the services and email you when they're down.

Jesse Iceberg
Jan 7, 2012

Rooted Vegetable posted:

How well does that work with nzb360 or LunaSea? I've stuck with http auth (using https and LE before anyone shouts) to maintain compatibility

I had thought the answer to this would be it doesn't, as I run a similar setup (actually got its starting point from their Docker Compose I think) and in the past if I wanted to use nzb360 with the services outside my LAN instead of their GUI, I've VPN'ed in to do it to bypass Traefik.

But from some searching, looks like you can maybe just put the Oauth layer in front of the service GUIs through careful use of Traefik labels, and leave the service API endpoints bare for nzb360 to hit. So long as you don't mind leaving those endpoints bare, that is, using the API key for their protection. Have to see if I can get that to work.

Hughlander
May 11, 2005

Jesse Iceberg posted:

I had thought the answer to this would be it doesn't, as I run a similar setup (actually got its starting point from their Docker Compose I think) and in the past if I wanted to use nzb360 with the services outside my LAN instead of their GUI, I've VPN'ed in to do it to bypass Traefik.

But from some searching, looks like you can maybe just put the Oauth layer in front of the service GUIs through careful use of Traefik labels, and leave the service API endpoints bare for nzb360 to hit. So long as you don't mind leaving those endpoints bare, that is, using the API key for their protection. Have to see if I can get that to work.

I should write up a full post but here's what I've done:
.env file
code:
PRIVATE_IP=HeadersRegexp(`X-Real-Ip`, `(^127\.)|(^10\.)|(^172\.1[6-9]\.)|(^172\.2[0-9]\.)|(^172\.3[0-1]\.)|(^192\.168\.)`)
docker-compose.yml
code:
  sonarr:
    container_name: sonarr
    image: ghcr.io/linuxserver/sonarr:preview
    restart: always
    volumes:
      - /dev/rtc:/dev/rtc:ro
      - sonarr_config:/config
      - /datastore/Media:/media/public
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
    labels:
      traefik.enable: true
      traefik.http.routers.sonarr.rule: "Host(`sonarr.${DOMAIN}`)"
      traefik.http.routers.sonarr.tls: true
      traefik.http.routers.sonarr.middlewares: "secured-admin"
      traefik.http.routers.sonarr.priority: 99
      traefik.http.routers.sonarr2.rule: "Host(`sonarr.${DOMAIN}`) && ${PRIVATE_IP}"
      traefik.http.routers.sonarr2.tls: true
      traefik.http.routers.sonarr2.middlewares: "secured-local"
      traefik.http.routers.sonarr2.priority: 100
... Traefik labels:

          # 0=Admin 1=Co-Admin 2=Super User 3=Power User 4=User
          traefik.http.middlewares.auth-user.forwardauth.address: "https://organizr.${DOMAIN}/api/v2/auth?group=4"
          traefik.http.middlewares.auth-admin.forwardauth.address: "https://organizr.${DOMAIN}/api/v2/auth?group=1"

          # Allow local without Auth:
          traefik.http.middlewares.secured-user.chain.middlewares: "frameoptions, auth-user"
          traefik.http.middlewares.secured.chain.middlewares: "frameoptions, auth-admin"
          traefik.http.middlewares.secured-admin.chain.middlewares: "frameoptions, auth-admin"
          traefik.http.middlewares.secured-local.chain.middlewares: "frameoptions"
If you come from a local IP you just get connected directly, otherwise you get redirected to organizr where you need to be a user login or an admin login depending if it's secured-admin or secured-user. Organizr is then using plex auth as it's login.

Burden
Jul 25, 2006

So I just got v3 of Sonarr and I had a question about the release profiles. If I set h265, hevc, and X265 at say 10 and X264 and h264 at a 1, would it download the 264 if it was available first, and then when the HEVC/265 becomes available it would download that after?

Xaris
Jul 25, 2006

Lucky there's a family guy
Lucky there's a man who positively can do
All the things that make us
Laugh and cry

Burden posted:

So I just got v3 of Sonarr and I had a question about the release profiles. If I set h265, hevc, and X265 at say 10 and X264 and h264 at a 1, would it download the 264 if it was available first, and then when the HEVC/265 becomes available it would download that after?

I think you need to add "Upgrade Available up to Indexer Preference" checkbox or something and then needs to be Monitored, but in theory yes. May require some tinkering.

I've got a convoluted setup but I have like +50 to *265 preference but also a file-size max and it seems to work in that it'll download 264 is nothing is available but also has to be under a certain size either way. i find it actually pretty hard to find older movies in *265 format, especially in the 1-7gb range.

EL BROMANCE
Jun 10, 2006

COWABUNGA DUDES!
🥷🐢😬



Xaris posted:

i find it actually pretty hard to find older movies in *265 format, especially in the 1-7gb range.

Tigole does a pretty good job in this range, and he covers a good variety of new and old movies. Just throw his name in to your indexers Movies x265 section and you should get a fairly long list. He includes extras too which is nice if you like those, I personally strip that folder out mind.

Violator
May 15, 2003


drat.

quote:

Error occurred while executing task MessagingCleanup: database disk image is malformed database disk image is malformed

Radarr 3 running in Docker on Synology. Just switched over to radarr like a week or two ago and already running into issues where I'm going to have to SSH in and do work to restore an old db backup. :(

Edit: Actually, I'm running the Synology package version of radarr. Maybe I'll try switching over to the Docker version since I had success installing tautulli.

Edit2: drat, restoring a db from last week didn’t fix it and still get the same error. Maybe need to just start over with a fresh install. Investigating the docket version.

Violator fucked around with this message at 19:52 on Dec 23, 2020

Slash
Apr 7, 2011

Violator posted:

drat.


Radarr 3 running in Docker on Synology. Just switched over to radarr like a week or two ago and already running into issues where I'm going to have to SSH in and do work to restore an old db backup. :(

Edit: Actually, I'm running the Synology package version of radarr. Maybe I'll try switching over to the Docker version since I had success installing tautulli.

Edit2: drat, restoring a db from last week didn’t fix it and still get the same error. Maybe need to just start over with a fresh install. Investigating the docket version.

The docker images of sonarr/radarr etc... have worked perfectly for me on Synology for several years now.

I've just re-built my entire setup using Traefik2 with oath and docker-compose. It took a solid two days to get it set up, but now its running smoothly it's so nice. The ability to update every container with just a couple of command lines is a huge QoL improvement for me, and the oauth authentication just works perfectly.

dangling pointer
Feb 12, 2010

Heads up it looks like geek was breached, if you used a CC to pay be sure to cancel it.



I have a membership at geek but haven't got this email, I saw it on reddit.

UncleGuito
May 8, 2005

www.ipadbackdrops.com daily wallpaper updates deserving of your iPad
Any idea on what they would have shown up on in the credit card statement? Can’t remember which card I used for my VIP.

more falafel please
Feb 26, 2005

forums poster

Yeah, so if I bought a lifetime membership a while back that CC info wasn't breached? Honestly can't remember if I used paypal or not.

Super-NintendoUser
Jan 16, 2004

COWABUNGERDER COMPADRES
Soiled Meat

UncleGuito posted:

Any idea on what they would have shown up on in the credit card statement? Can’t remember which card I used for my VIP.

I believe they accepted Amazon Giftcards (lol I know). I know I paid for my first few months that way, but I got a lifetime membership and I'm not sure how I paid for that since I can't find any transaction record.

sedative
Mar 20, 2003

‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ ‏ :allears:

UncleGuito posted:

Any idea on what they would have shown up on in the credit card statement? Can’t remember which card I used for my VIP.

It was "forevergeek.info" for me in 2017

Bank
Feb 20, 2004
Keylogger on the website? Or more like saving all submitted user inputs? I know it's splitting hairs but I'm kind of surprised they are describing it that way.

Henrik Zetterberg
Dec 7, 2007

I just got the email as well

e: My only charge with them was labeled “Green Goat Gaming”

Henrik Zetterberg fucked around with this message at 22:23 on Dec 27, 2020

FCKGW
May 21, 2006

I just reupped my nzbgeek sub last month but thankfully I used a 1password/Privacy.com virtual card for the first time. Now I can just cancel it immediately.

Xaris
Jul 25, 2006

Lucky there's a family guy
Lucky there's a man who positively can do
All the things that make us
Laugh and cry

Henrik Zetterberg posted:

I just got the email as well

e: My only charge with them was labeled “Green Goat Gaming”

Yeah I bought VIP back in July 29 and it also came up as Green Coat Gaming. I used my Apple Card so I have pretty good real-time notification of transactions on my phone. I'll keep an eye on it. It sounds like it's only majorly a problem if you did used your CC on/after November 20th 2020 where they may have been intercepting all transactional data which is probably around when they were hijacked. They probably could have worded that better.

Violator
May 15, 2003


FCKGW posted:

I just reupped my nzbgeek sub last month but thankfully I used a 1password/Privacy.com virtual card for the first time. Now I can just cancel it immediately.

I need to investigate that, super neat service that I get with that subscription but haven’t actually used.

FCKGW
May 21, 2006

Violator posted:

I need to investigate that, super neat service that I get with that subscription but haven’t actually used.

It’s pretty good, you can set a monthly or yearly limit too for recurring payments.

UncleGuito
May 8, 2005

www.ipadbackdrops.com daily wallpaper updates deserving of your iPad

Henrik Zetterberg posted:

I just got the email as well

e: My only charge with them was labeled “Green Goat Gaming”

This was it for me, thanks!

Random question - just installed a new HDD on my server and now my sabnzbd/radarr config is acting funky. I have stuff download to a high speed thumb drive then copy over to my slower, larger HDD after completion. Downloads are still completing but the radarr completed download automation for renaming doesn't seem to be working. The completed folder is copying to the new drive in the correct location but retains the directory name set by sabnzbd - not radarr (there's no proper radarr directory even though the individual movie setting has the correct path set).

UncleGuito fucked around with this message at 02:52 on Dec 28, 2020

PirateDentist
Mar 28, 2006

Sailing The Seven Seas Searching For Scurvy

Henrik Zetterberg posted:

I just got the email as well

e: My only charge with them was labeled “Green Goat Gaming”

Oh good, everyone mentioning privacy.com made me remember I used that and I could verify that was it. Green Goat Gaming was the charge on privacy, and the card was already closed shortly after. I can relax now. I'm pretty careful about not using my card anywhere strange, but I couldn't find the last charge I did to make sure.

In related info I finally upgraded to Sonarr v3 and it fixed all the weird issues I was having with network drives. poo poo finally works again.

devmd01
Mar 7, 2006

Elektronik
Supersonik
I need to renew with nzb.su, I’m glad I use privacy.com for anything Usenet related. I’m pretty sure a card got compromised with them a couple of years back so it’s a good thing to stay safe.

Craptacular!
Jul 9, 2001

Fuck the DH
If you have a CapitalOne card, they support temporary, merchant-specific virtual card numbers. I just locked and deleted the one I used with them.

Vykk.Draygo
Jan 17, 2004

I say salesmen and women of the world unite!

Craptacular! posted:

If you have a CapitalOne card, they support temporary, merchant-specific virtual card numbers. I just locked and deleted the one I used with them.

I believe Bank of America has this too.

fraggsta
Feb 2, 2003

mmmm, black straight hair.
I notice a few pages back some people have been talking about why NZBGet is downloading slowly. Recently I looked into my own setup, and saw that downloads were slowing down a lot more, getting down to 5 MB/s (when my connection can do about 47 MB/s).

Eventually I found that as I'm running it on a Linux server with a software RAID (yes, I know you don't like software RAID, I should use hardware RAID blah blah, I'm ok with it and it works fine) and the conclusion was that since version 16, NZBGet is causing an fsync to happen once per second, slowing down saving to disk considerably. The solution was to enable "FlushQueue=no" in the NZBGet config file. I couldn't find a way to change this from within the web interface. After changing this option, my download speeds went from 5 MB/s to 39 - 42 MB/s. If you've been having trouble with slow downloads you might want to try this option. FlushQueue does make the system more resistant to crashes and probably makes it easier to resume the queue after a crash but I don't really want that to completely cripple my download speeds.

Slash
Apr 7, 2011

One of the HDD's in my NAS is starting to fail, and it's probably time to start upgrading them to larger ones anyway. Are WD Red still the best option? and the price sweetspot seems to be around 4TB or 6TB? Also what's the deal with this SMR technology, do i need to specifically avoid it?

rufius
Feb 27, 2011

Clear alcohols are for rich women on diets.

Slash posted:

One of the HDD's in my NAS is starting to fail, and it's probably time to start upgrading them to larger ones anyway. Are WD Red still the best option? and the price sweetspot seems to be around 4TB or 6TB? Also what's the deal with this SMR technology, do i need to specifically avoid it?

While there are probably a number of folks overlapping, the NAS thread is probably better suited to answer your question: https://forums.somethingawful.com/showthread.php?threadid=2801557&perpage=40&noseen=1&pagenumber=644

Irritated Goat
Mar 12, 2005

This post is pathetic.
Kinda weird issue? I'm sure it's something simple but I've checked everything I can think of. Sonarr is being real sketchy about grabbing anime. I confirmed I've got the Anime category listed in Sonarr's entry for NZBHydra. I've got NZBHydra looking at sites that can handle it. If I do a manual search in Hydra, it finds the header I'm looking for but Sonarr can't find it. Log shows it sees 4 returns but didn't grab any. If I do an interactive search, it doesn't find anything.

wolrah
May 8, 2006
what?

fraggsta posted:

Eventually I found that as I'm running it on a Linux server with a software RAID (yes, I know you don't like software RAID, I should use hardware RAID blah blah, I'm ok with it and it works fine)
I'm not sure where you would get the idea that software RAID is bad. Years ago it was looked down on for performance reasons but these days thanks to the progress of CPUs the performance advantage of hardware RAID has been more or less eliminated in most normal use cases, leaving mostly disadvantages in terms of proprietary formats, limited administration tools, etc.

Hardware RAID arrays can be a real pain in the rear end if you want or need to replace the controller, especially if you're moving to a different brand of controller, where software solutions don't really care what you're running them on. Software RAID is generally 100% portable within an operating system family regardless of underlying hardware and sometimes (particularly ZFS) portable across systems as long as the OS you're running implements the same or newer version of whichever solution you're using.

Takes No Damage
Nov 20, 2004

The most merciful thing in the world, I think, is the inability of the human mind to correlate all its contents. We live on a placid island of ignorance in the midst of black seas of infinity, and it was not meant that we should voyage far.


Grimey Drawer

Irritated Goat posted:

Kinda weird issue? I'm sure it's something simple but I've checked everything I can think of. Sonarr is being real sketchy about grabbing anime. I confirmed I've got the Anime category listed in Sonarr's entry for NZBHydra. I've got NZBHydra looking at sites that can handle it. If I do a manual search in Hydra, it finds the header I'm looking for but Sonarr can't find it. Log shows it sees 4 returns but didn't grab any. If I do an interactive search, it doesn't find anything.

I don't know if this is a problem in my own setup, but I've never been able to auto-collect anime episodes. If I add a series and do a manual search, it pulls up completely unrelated shows and episodes. I don't follow that many shows anymore so I just manually download the episodes or season packs and then import them through Sonarr to keep everything uniform.

e:

Slash posted:

One of the HDD's in my NAS is starting to fail, and it's probably time to start upgrading them to larger ones anyway. Are WD Red still the best option? and the price sweetspot seems to be around 4TB or 6TB? Also what's the deal with this SMR technology, do i need to specifically avoid it?

rufius posted:

While there are probably a number of folks overlapping, the NAS thread is probably better suited to answer your question: https://forums.somethingawful.com/showthread.php?threadid=2801557&perpage=40&noseen=1&pagenumber=644

Very +1 cross post to the NAS thread, they get those exact questions all the time. In short, WD Reds are still quality drives, but you absolutely DO need to avoid SMR for a NAS application. WD hosed up by using SMR in their Red line, which was specifically marketed for NAS. They've since relaunched non-SMR Reds as Red Pro or some poo poo, selling the same drives as before but at a markup because this time they really are for NAS we promise :rolleyes:

A good general sweetspot calculation for price is $15/TB, if you can get close to that you should buy. If you do go WD Reds at those sizes, look up what serial numbers are SMR vs non-SMR, they were using it in the smaller drives, but I don't believe it was ever put in place on drives 8TB or larger.

Takes No Damage fucked around with this message at 19:42 on Dec 29, 2020

Head Bee Guy
Jun 12, 2011

Retarded for Busting
Grimey Drawer
So is it a bad idea to sign up for Eweka with paypal?

fraggsta
Feb 2, 2003

mmmm, black straight hair.

wolrah posted:

I'm not sure where you would get the idea that software RAID is bad. Years ago it was looked down on for performance reasons but these days thanks to the progress of CPUs the performance advantage of hardware RAID has been more or less eliminated in most normal use cases, leaving mostly disadvantages in terms of proprietary formats, limited administration tools, etc.

Hardware RAID arrays can be a real pain in the rear end if you want or need to replace the controller, especially if you're moving to a different brand of controller, where software solutions don't really care what you're running them on. Software RAID is generally 100% portable within an operating system family regardless of underlying hardware and sometimes (particularly ZFS) portable across systems as long as the OS you're running implements the same or newer version of whichever solution you're using.

I put that in to preemptively dissuade those with that view who might want to derail this into an argument about hardware vs software RAID. With so many cores in modern CPUs, software RAID isn't much of an overhead any more. When I retired my previous desktop and made it into my home server I was able to very easily transfer the array over by just plugging the drives into the motherboard and a few PCIe SATA cards in fairly random order and Linux just picked it up. I remember a few years ago you had to get the drives to be detected by Linux in the same order as the original machine. Performance is good enough that I can saturate a 1 Gb/s network card when copying files and it seems to only take a few percent of CPU time on one core doing it.

Anyway, I posted that in case anyone else with NZBGet downloading to a RAID array encountered similar symptoms. Mention of it is buried away on the NZBGet performance tips page but not explained very well.

Adbot
ADBOT LOVES YOU

devmd01
Mar 7, 2006

Elektronik
Supersonik

Head Bee Guy posted:

So is it a bad idea to sign up for Eweka with paypal?

Privacy.com is free. I’m happy I switched to eweka, it downloads way faster than supernews ever did.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply