Funnily enough Docker compose has never worked for me on Podman. There always seems to be something that is incompatible (also due to me running on Debian). However, I feel like it should become a standard amongst homelabbers and professionals to use Kubernetes manifests going forward, since it is the most portable.

NFS is a pain, no question about it. I used to use longhorn but these days since I’m doing a single node k3s I’m just doing hostpath. It’s that PVCs make intuitive sense to me, but I guess podman will likely work just fine for such cases other than canary deployments and OOTB service-meshes

Well I guess podman works fine for the first few months. Interestingly I still use build-ah heavily for building my custom images

Not needing Kubernetes is a broad statement. It allows for better management of storage and literally gives you a configurable reverse-proxy configured with YAML if you know what you’re doing.

OP please forward this email and your story to Louis Rossman

Fail2ban + key-based SSH + self-hosted WAF if you can spin up another machine == 80% of your Web hosting problems gone

6TiB, backed up to the cloud. So 12TiB in total

Thanks for the comment, that was a good read

Thanks, since the user would need to read write and execute permissions to the directory, I put in chmod 775

Thanks I changed it to chmod 755 and it worked

You can do that with Wireguard and NAT.

Traefik’s marketing as the “Docker reverse-proxy” put me off since I like technologies to stay agnostic of each other (personal preference).

Your arguments are correct, and usually I’d run a separate web server but I suppose for a homelab having less things to manage is great

Indeed, I don’t find NGINX that easy to configure either

I have heard a lot about Envoy proxy from Istio but never looked into it for baremetal usage. I’ll keep an eye out, thanks

It should technically do that already, but as extra insurance I’m running it with the -u bind flag in ENTRYPOINT. The problem was solved with a chmod 755

Thank you, chmod 775 worked

Thank you, I’ll keep that in mind. I didn’t actually mount volumes into the container yet, the problem was solved upon changing to chmod 755

I think ZFS does some advanced stuff which makes it better than just relying on hardware checksums (which have been shown to not be so great)

How about bitrot?

Yeah I’m looking for something like this for Linux desktop