Ok, so reading the replies I see that it was meant for me.
All the relevant volumes are mapped to the actual filesystem on disk (like you do in docker compose, ig it's called a volume bind-mount?), so when I have to take backups I stop the docker container and manually cp/rsync/whatever from the directory.
The github and codeberg services are nothing but HTTPS checks for both of them
Ah, I asked around and people recommended miniflux over freshrss since the former is written in Go and is lighter and faster.
Radicale is pretty nice, fits my bill well, and just works. Some people say Baikal is better, but Radicale fits my bill very well so I didn't bother changing.
Well, as I mentioned, I don't think I can host an XMPP server without having a fixed IP address and exposing it to the public internet and allowing inbound connections.
So it's probably a no-no (for now) 😅
Also, idk if xmpp is lightweight, but as a user, I quite like matrix
Ah yes, I got it working, the issue was unshare-pgid which had already been sort of raised in nixpak.
In my case, I used bubblewrap.newSession (which is equivalent of --new-session). Idk why that worked out finally with --unshare-pgid, but I'd rather not spend more time on this.
I like the idea of let binding the package declaration to use it in the config as well. I'll probably use that. Thanks!
I access it using the hostname of the device (since netbird and tailscale both let you do that)
I also open docker ports only for localhost, and use caddy to reverse proxy subdomains to the respective localhost ports. Less port clutter from outside this way. Ofcourse things like SFTPGo's SFTP port is an exception
Also, vaultwarden requires HTTPS?? Ah drat, that's not good :/ I don't have experience with that.
I don't have anything against Pihole. It's wonderful! I don't have additional resources (like RPi), and I want to keep everything on one system, and my usecase is simple enough that netbird covers it, and I don't know if I should pass all my DNS requests on both my phone and PC through my server (because iirc it's finally the pihole system that'll make the request?)
Oh wow! I didn't know home-assistant can work in a closed network, but now it makes sense
What does leafwiki do exactly?
I also read your backup strategy below and that seems pretty interesting. My strategy differs. Have nothing in the volumes, unless it's like docs or whatever lol. I do think that'll change with things like Paperless, since I'd want to persist and carry over the tagging strategy or whatever.
Took me a while to realise that the link was shared with Saotak themself. I love your articles Saotak (even if I'm not a furry) and I've learned a great deal of crypto from you
Ok, so reading the replies I see that it was meant for me.
All the relevant volumes are mapped to the actual filesystem on disk (like you do in docker compose, ig it's called a volume bind-mount?), so when I have to take backups I stop the docker container and manually cp/rsync/whatever from the directory.
The github and codeberg services are nothing but HTTPS checks for both of them
Ah, I asked around and people recommended miniflux over freshrss since the former is written in Go and is lighter and faster.
Radicale is pretty nice, fits my bill well, and just works. Some people say Baikal is better, but Radicale fits my bill very well so I didn't bother changing.
Well, as I mentioned, I don't think I can host an XMPP server without having a fixed IP address and exposing it to the public internet and allowing inbound connections.
So it's probably a no-no (for now) 😅
Also, idk if xmpp is lightweight, but as a user, I quite like matrix
whoaa! I'd love to see your setup some time!
Ah yes, I got it working, the issue was unshare-pgid which had already been sort of raised in nixpak.
In my case, I used bubblewrap.newSession (which is equivalent of --new-session). Idk why that worked out finally with --unshare-pgid, but I'd rather not spend more time on this.
I like the idea of let binding the package declaration to use it in the config as well. I'll probably use that. Thanks!
What does oPodSync do exactly?
Ah, it seems that gollum would cover this, although I'd keep an eye on this as well.
Ah, as long as self-signed certs are an option, I can work with that :)
Thanks! Still remember the good old days, when I didn't know how to set up docker compose properly (I don't think I still do 🤣)
But I've certainly come a long way, and it's really fun! Also, I've seen you post here often! Cheers!
I access it using the hostname of the device (since netbird and tailscale both let you do that)
I also open docker ports only for localhost, and use caddy to reverse proxy subdomains to the respective localhost ports. Less port clutter from outside this way. Ofcourse things like SFTPGo's SFTP port is an exception
Also, vaultwarden requires HTTPS?? Ah drat, that's not good :/ I don't have experience with that.
I've heard good things about SearXNG. I'll be sure to check that out.
I don't see the need for cryptpad, since SFTPGo serves my purposes.
I'd look into mealie, since I'm going to live alone and need to figure my own meals out. Perhaps Sure/Actual too!
I am still looking at container management, right now I just manually update/backup everything.
That looks interesting! Although my current setup is simple, so I'd like to hear from you what arcane simplifies from experience
I don't have anything against Pihole. It's wonderful! I don't have additional resources (like RPi), and I want to keep everything on one system, and my usecase is simple enough that netbird covers it, and I don't know if I should pass all my DNS requests on both my phone and PC through my server (because iirc it's finally the pihole system that'll make the request?)
Also I hate ads lol
Oh wow! I didn't know home-assistant can work in a closed network, but now it makes sense
What does leafwiki do exactly?
I also read your backup strategy below and that seems pretty interesting. My strategy differs. Have nothing in the volumes, unless it's like docs or whatever lol. I do think that'll change with things like Paperless, since I'd want to persist and carry over the tagging strategy or whatever.
Took me a while to realise that the link was shared with Saotak themself. I love your articles Saotak (even if I'm not a furry) and I've learned a great deal of crypto from you
Thanks, this was quite detailed. You do need public relay nodes after all... which was what I was wondering.
I suppose they don't work without having
Like, if the IPs keep changing, and a device goes offline and then online, how does yggdrasil know how to reach that system?
C was literally created by AT&T for unix and pushed into POSIX and enforced as a standard.
C is as corporate as it gets.
It's custom ascii art. I got it from archwiki. You can change the image/text used in fastfetch config
I'd be surprised if the majority of folks on arch aren't using tiling WMs.