Its just another part of the puzzle you have to figure out.
When I first started, getting my reverse proxy, port forwarding, domain name etc working and debugging the issues took a lot of time and learning.
Certainly doable but will just make things harder
To be fair i really like having a separate nas to my main docker/proxmox applications server. It allows me to mess around with my services or restart the system while not having to mess with the more sensitive spinning drives or important services like pihole.
Also gives me a nice method for local backup in 3-2-1 method.
That being said, I wouldn’t recommend this for someone just starting out.
If anyone is wondering, I have the docker container itself mount the NFS share from the Unraid NAS. My docker server is all nvme ssds for things like the app itself and its config. Large data sets like photos and media are in the same via NFS.
Sonarr puts shows in
Check their website for migration info. There are some caveats in special circumstances but most people can just change the docker image from gitea to forgejo.
I did exactly that with no issues.
Futo voice to text works nice and fast on my pixel 8 pro. Fractions of a second slower than google. Also that’s with the slower English 74 library (more data point, slower). They have an even larger one but the default is the smaller and faster English-39 model
This is the correct answer for the selfhosted crowd
Sleep mode seems to be working well for me on fedora atomic with kde (aurora).
Deep sleep works well and can stay sleeping for days.
Normally sleep rules are working well. The do not sleep toggle in the power menu also works to prevent it from sleeping.
Only thing that doesn’t work is flatpak apps can’t prevent the system from sleeping, so watching a video, using Handbrake to encode etc will all just allow it to sleep if there is no physical input.
I have a 2018 dell xps
And borgmatic makes retention rules with automatic runs super easy. It basically a wrapper that runs borg on the client side.
I’ve been using this for a few months now. Its really great.
Security in layers.
All your services should be using https. Vaultwarden in particular won’t even run without https unless you bypass a bunch of security measures.
This is how to setup local only and external https, I highly recommend this as a baseline setup for every homelab. It allows you to choose how much security you want on a per app basis and makes adding new apps trivially easy.
Anyone with the knowledge to self host will quickly discover 3-2-1. If they choose to follow it, that’s on them but data loss won’t be from ignorance
Borg backup to borgbase is not very expensive and borg will encrypt the data plus the vault is also encrypted
Keep vaultwarden behind wireguard for local only access then also use https certs and good master password. Very secure like this
Last in checked, there is an open PR for the PWA Android app the expose the share function. That will allow this to work however you will have to install the PWA via chrome since the share feature for PWA is proprietary. Sucks because I use Firefox with a bunch of privacy features .
Https is end to end encryption and doesn’t need to be on their road map
Encryption at rest could be an option but seeing as how many other projects have trouble with it (nsxtcloud), its probably best to have this at the fike system level with disc encryption
Same with jellyfin.
They basically don’t accept recurrent donations on purpose
I’ve got multiple apps using LDAP, oauth, and proxy on authentik, I’ve not had this happen.
I also use traefik as reverse proxy.
I didn’t manually create an outpost. Not sure what advantage there is unless you have a huge organization and run multiple redundant containers. Regardless there might be some bug here because I otherwise have the same setup as you.
I would definitely try uploading everything to the latest container version first
For people wanting the a very versatile setup, follow this video:
Apps that are accessed outside the network (jellyfin) are jellyfin.domain.com
Apps that are internal only (vaultwarden) or via wireguard as extra security: Vaultwarden.local.domain.com
Add on Authentik to get single sign on. Apps like sonarr that don’t have good security can be put behind a proxy auth and also only accessed locally or over wireguard.
Apps that have oAuth integration (seafile etc) get single sign on as well at Seafile.domain.com (make this external so you can do share links with others, same for immich etc).
With this setup you will be super versatile and can expand to any apps you could every want in the future.
Does anyone know if dockge allows you to directly connect to a git repo to pull compose files?
This is what I like most about portainer. I work in the compose files from an IDE and the check them into my self hosted git repo.
Then on portainer, the stack is connected to the repo so only press a button to pull the latest compose and there is a check box to decide if I want the docker image to update or not.
Works really well and makes it very easy to roll back if needed.
I also would like to know what the desktop app is used for?
I’ve seen apps like xpipe that have direct Bitwarden integration if you want (way too high risk for me but I can see some people using it), but even then it integrates directly to the servers API. When I need an ssh password or something I copy and paste it from the browser extension. I’m curious if I’m missing some functionality by not using the app.