Ok, so reading the replies I see that it was meant for me.

All the relevant volumes are mapped to the actual filesystem on disk (like you do in docker compose, ig it’s called a volume bind-mount?), so when I have to take backups I stop the docker container and manually cp/rsync/whatever from the directory.

The github and codeberg services are nothing but HTTPS checks for both of them

What does oPodSync do exactly?

Ah, it seems that gollum would cover this, although I’d keep an eye on this as well.

Ah, as long as self-signed certs are an option, I can work with that :)

Thanks! Still remember the good old days, when I didn’t know how to set up docker compose properly (I don’t think I still do 🤣)

But I’ve certainly come a long way, and it’s really fun! Also, I’ve seen you post here often! Cheers!

I access it using the hostname of the device (since netbird and tailscale both let you do that)

I also open docker ports only for localhost, and use caddy to reverse proxy subdomains to the respective localhost ports. Less port clutter from outside this way. Ofcourse things like SFTPGo’s SFTP port is an exception

Also, vaultwarden requires HTTPS?? Ah drat, that’s not good :/ I don’t have experience with that.

I’ve heard good things about SearXNG. I’ll be sure to check that out.

I don’t see the need for cryptpad, since SFTPGo serves my purposes.

I’d look into mealie, since I’m going to live alone and need to figure my own meals out. Perhaps Sure/Actual too!

I am still looking at container management, right now I just manually update/backup everything.

That looks interesting! Although my current setup is simple, so I’d like to hear from you what arcane simplifies from experience

I don’t have anything against Pihole. It’s wonderful! I don’t have additional resources (like RPi), and I want to keep everything on one system, and my usecase is simple enough that netbird covers it, and I don’t know if I should pass all my DNS requests on both my phone and PC through my server (because iirc it’s finally the pihole system that’ll make the request?)

Also I hate ads lol

Oh wow! I didn’t know home-assistant can work in a closed network, but now it makes sense

What does leafwiki do exactly?

I also read your backup strategy below and that seems pretty interesting. My strategy differs. Have nothing in the volumes, unless it’s like docs or whatever lol. I do think that’ll change with things like Paperless, since I’d want to persist and carry over the tagging strategy or whatever.

Took me a while to realise that the link was shared with Saotak themself. I love your articles Saotak (even if I’m not a furry) and I’ve learned a great deal of crypto from you

Thanks, this was quite detailed. You do need public relay nodes after all… which was what I was wondering.

I suppose they don’t work without having

• a coordination server of sorts
• having all the nodes on static IP

Like, if the IPs keep changing, and a device goes offline and then online, how does yggdrasil know how to reach that system?

Ah yes, I came across this when someone else pointed it out as well. The project looks neat, ngl. supac also shares some goals along these lines, but dcli looks more mature. I still prefer supac (it’s my project duh) because supac allows you to script in nushell, which lets you do interactive development (if you use nushell as your shell, which you absolutely should!). I also don’t prefer something like YAML for config, but since it’s extensible with lua, I guess it makes sense to go with a config language as well. I do think the end goals are different, I try to orient supac to be a nix alternative but with integrated package management across different package managers. Also, supac is simpler in principle because a lot of the complexity is shifted to accompanying libs in nushell (such as systemd unit integration).

Not to mention, with a couple of lines of nushell code you can probably import all your yaml configs from dcli into supac :)

I’d rather just use nix 🙃

Haha, fair enough. The reason I even created this in the first place was because of how painful nix/nixOS is to use in general. Nushell is far simpler, and much more ergonomic to deal with. Especially with how much it supports structured data.