Lem453

joined 2 years ago
[–] Lem453@lemmy.ca 4 points 3 months ago (2 children)
[–] Lem453@lemmy.ca 7 points 3 months ago (1 children)

What's the advantage of socket activation? Is it more secure than exposing a docker port?

[–] Lem453@lemmy.ca 2 points 3 months ago (1 children)

Mine works instantly on a pixel 8. There is a notification that is always active for the gotify app. I believe an always on notification is required for instant pushing with non google apps. Maybe you haven't enabled it in the settings somewhere?

[–] Lem453@lemmy.ca 1 points 3 months ago (3 children)

Gotify along with an external email service. I get each notification twice, immediately

[–] Lem453@lemmy.ca 2 points 3 months ago* (last edited 3 months ago) (2 children)

If I run traefik and jellyfin in docker, do I add the docker IP of traefik as the trusted proxy?

[–] Lem453@lemmy.ca 1 points 4 months ago

I use self hosted borg repo to backup to a local server and then also borgbase is a service that allows remote backup.

Borgmatic automates all of this.

[–] Lem453@lemmy.ca 2 points 4 months ago (6 children)

He's saying that while there is no benefit to being connect to WG at home, there is also no downside so many people just stay connected all the time.

[–] Lem453@lemmy.ca 1 points 4 months ago

I haven't tried it, but the app has the ability to select which app it tunnels.

When you make a new tunnel, it says "all applications" if you click on that you can select specific ones to include or exclude

[–] Lem453@lemmy.ca 10 points 4 months ago* (last edited 4 months ago)

Android wireguard all hasn't been updated in 18mo. Its extremely simple with a small code base. There basically isn't anything to update. It uses wireguard kernel module which is itself is only like 700 lines of code. It so simple that it basically became stable very quickly and there is nothing left of update right now.

https://git.zx2c4.com/wireguard-android/about/

I personally get the from obtainium to bypass play store

[–] Lem453@lemmy.ca 1 points 4 months ago (4 children)

I just stay connected to wireguard even at home, only downside is the odd time I need to chromecast, it needs to be shut off.

[–] Lem453@lemmy.ca 14 points 4 months ago (19 children)

I use plain wireguard on me phone, always on essentially with no issues. I wonder why tailscale app can't stay open.

[–] Lem453@lemmy.ca 1 points 4 months ago

I use Borg but every now and then I mount a backup and download a few files to make sure they work correctly.

I've so far only had to do this for real with my local zfs snapshots after messing up a config file or blowing away the wrong folder. Process to restore is essentially the same except I would mount the Borg repo instead of a local zfs snapshot

 

Hi all. Just learned about NixOS a few weeks ago. I'm in the process of migrating several of my docker services to a new server that will have proxmox installed as the host and then a VM for docker.

I'm currently using alpine as the VM and it works well but one of the main goals of the migration is to use infrastructure as code as much as possible. All my docker services are docker compose files checked into a git repo that gets deployed. When I need to make a change, I update the git repo and pull down the latest docker compose.

I currently have a bunch of steps that I need to do on the alpine VM to make it ready for docker (qemu agent, NFS shares, etc).

NixOS promises to be able to do all that with a single config file and then create a immutable OS that never changes after that. That seems to follow the philosophy well for infrastructure as code and easy reproducibility.

Has anyone else tried NixOS as a docker host? Any issues you've encountered?

 

I'm just starting to upgrade my basic unraid docker to an InfraAsCode setup.

I will use unraid as Nas only. My media and backups will be on unraid, everything else on a separate proxmox VM that is running and SSD storage array for ZFS. Both the unraid and proxmox hosts share their storage via NFS. Each docker container mounts the NFS volumes as needed.

For the containers I use an alpine VM with docker. I use portainer to connect to a gitea repo (on unraid) to pull down the docker compose file.

So my workflow is, use VS code on my PC to write the compose file, commit to git, then on portainer I hit the redeploy button and it pulls the latest compose file automatically.

What's your setup?

view more: ‹ prev next ›