I use nextcloud to sync our photos, with the memory’s add-on and mobile app you can even have collections.
I run this server
I use nextcloud to sync our photos, with the memory’s add-on and mobile app you can even have collections.
I use swarm in my home lab, I don’t have any docker things at work so Kubernetes is way more then I want to manage.
All my stacks are in a git repo, I have an ansible playbook to update them if needed. I also have most things tracked on new releases (https://newreleases.io/) so I know when something needs an update, then I can either update the git repo by hand or use ansible.
Also have a look at docker contexts, you can manage your swarm from a remote location.
So I need to make a VPS setup script to install bind for DNS and wireguard or openvpn and push it to gitlab/GitHub?
It is very simple, I run it from docker and it can plug into all sorts of places, I have nginx config that I could share if it helps.
This is the tool https://oauth2-proxy.github.io/oauth2-proxy/
Depending on the login flow, I have a lot of stuff behind an oauth proxy. So that you have to have a working 2fa account to see the non 2fa system behind.
Electric shock to you? Get an electrician to check it and sign it off?
I have my portainer behind an oath proxy, using keycloak as the Auth provider
I would have a cron that runs a script to pull the list and update IPset, this might not work.
make a file on your docker server with the below in it, set the file to execute chmod +x file.sh
#!/bin/sh
ipset -q flush ipsum
ipset -q create ipsum hash:ip
for ip in $(curl --compressed https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -v -E "\s[1-2]$" | cut -f 1); do ipset add ipsum $ip; done
iptables -D INPUT -m set --match-set ipsum src -j DROP 2>/dev/null
iptables -I INPUT -m set --match-set ipsum src -j DROP
Then add a cron file in /etc/cron.d
that runs the script every 24 hours
10 3 * * * root /root/file.sh
Some thing like this
iptables -I DOCKER-USER -m set --match-set ipsum src -j DROP
Should do what you need
I use pihole as my home DNS to do that
not sure your example domain is the best, can you lookup hrowood.biz?
this might be what your looking for -> https://docs.pi-hole.net/guides/dns/unbound/
great work, But I haven’t got 0.19.4 sorted yet
noted
not tested this, but you might want to look at DHCPv6 Relay
to get an IP from your ISP router
Ok, Aws is 24/7. But they will just help you spend even more money
That’s just like Aws, you pay for better and longer support. But they don’t make it clear support is only 9-5
That is true of any hosting provider, I have backups backblaze.
only if your happy that you could get a duff build and kill the service, I now watch with https://newreleases.io/ and update as needed