Comment on What do you prefer to selfhost?
earth_walker@lemmy.world 2 months ago
I self host jellyfin, nextcloud, owncast, tandoor, komga, photoprism and searxng. I use nginx proxy manager for a reverse proxy and SSL cert automation. Works great for me but I would like to get into traefik sometime.
I self host for privacy reasons, also it’s fun, it’s a learning opportunity and sometimes self-hosted services are functionally better than the other options out there.
zingo@lemmy.ca 2 months ago
I got tired of the NPM and went to traefik for 2 reasons.
NPM kept locking me out of my account (admin), like 4 times during the time I was using it. That meant that it was not reliable enough for daily use.
From what I heard is that the NPM project only has 1 developer and so they can’t really respond and fix security flaws in a proper timeframe.
I’m using traefik now for internal traffic while VPN in if I need internal services while out and about.
Jim’s Garage has a great YouTube video on setting it up.
infeeeee@lemm.ee 2 months ago
It’s mostly just nginx with a webui. You can even see the nginx config files if you bash into the container. It has the same bugs as upstream nginx. Do not expose the management port to the internet.
Plus compared to normal nginx, it’s harder to misconfigure it. Most of my services are just the default config, so I can’t mess it up accidentally.
About lockouts: Once also happened me, but that was just a messed up update, next update fixed itself. If you lock yourself out you can usually edit the db directly, it defaults to sqlite, but I used it with mariadb.
earth_walker@lemmy.world 2 months ago
How did you set up a VPN to securely connect to your services over the internet? I have looked for guides to do this and haven’t had much luck. I would really like to implement this in my setup.
zingo@lemmy.ca 2 months ago
I can once again refer to Jim’s Garages video about setting up wireguard on Docker. Very easy.
earth_walker@lemmy.world 2 months ago
Thank you, I wasn’t sure if that video was re: Traefik or VPN. I appreciate the suggestion.