Comment on Need tips for moving forward
AmbiguousProps@lemmy.today 3 months ago
You can host remote files via SFTP + cloudflared (or another reverse tunnel provider) without opening any ports. Then you use a file manager to add a network share with your SFTP information.
For the calendar, WebDAV is probably your best bet, which also works with reverse tunneling. You can also use WebDAV in place of SFTP if you prefer to only have one (or two with a reverse tunnel) service configured.
Hi, thanks. I’ve been testing out NextCloud and it might be a bit too bloated and buggy for me (document editor iffy on mobile and encountering files and folders being falsely locked and thus cannot be interacted with) so I might give sftp a go.
Is there a dockerhub project you would reccomend? I’ve been looking at sftpgo (hub.docker.com/r/drakkan/sftpgo) as a option?
In the past, when I’ve used SFTP, I just use the openssh docker container with a mount of my filesystem (since SFTP uses SSH). Particularly this image: hub.docker.com/r/linuxserver/openssh-server
I can’t speak to sftpgo as I haven’t used it, but from looking it up it seems that some people like it, although it’s a pain to set up. If you want something simple I’d still just go with openssh.
tux0r@feddit.org 3 months ago
Also, using a container adds severe overhead.
IMO, Unison is a pretty good software for this use case.
AmbiguousProps@lemmy.today 3 months ago
I suppose that it adds technical overhead, but in my opinion the benefit of docker is how easy it is to spin up a new service, and how easy it is to update and maintain them.
tux0r@feddit.org 3 months ago
Docker does not even work on my servers - wrong operating system, I guess. Docker containers have one more disadvantage on systems where it does work: the contents of a container aren’t updated when the host operating system is, basically leaving 0-days unpatched longer than absolutely necessary.
AmbiguousProps@lemmy.today 3 months ago
Interesting, what OS are you running? I’ve never ran into one that it doesn’t work on so that’s surprising.
I would counter that disadvantage with this: due to testing constraints, docker containers are usually updated more quickly when there’s a 0 day, and you don’t have to patch your entire OS if one single container has one. It reduces operator overhead greatly, because that’s what it’s designed to do. Even if one of your containers has a vulnerability, because it’s a container, it won’t necessarily affect your entire system, depending on the vulnerability.