FlexibleToast

Yeah, but if you were doing lxc + docker per container you might as well use this oci as lxc method. I think both methods are silly, but that’s just my opinion.

How does that make it easier for maintenance?

You have each “docker” container in there own lxc running docker? That’s a silly way to do it if I’m understanding correctly. You’re adding overhead to containers for little to no benefit. You could put them all in the same lxc or Proxmox supports OCI containers natively now.

Do you not understand what a suite of tools is? It’s a curated collection of tools that have been chosen to work together. You’re describing the reasons why Pangolin is in fact a full suite. You’re right, Pangolin is the bit that orchestrates them and brings them together with an easier way to manage them. That’s what a suite of tools does.

Pangolin uses gerbil with newt for those wireguard tunnels. That’s a massive improvement already. It also adds a bunch more features like vpn, you can crowdsec, and more that I don’t use. To say it’s debatable if it’s a suite of tools is just wrong.

I’ve set it up next to my NPM and it’s more complicated, but so much more capable. Traefik is what it uses to proxy things. You’re comparing a full suite of tools with just one piece.

Free vps in oracle cloud with Pangolin. Never have to worry about explaining VPNs.

Just self host the whole thing with Forgejo. I run a few github actions on runners all on my own stuff.

I haven’t used it, but this project looks interesting: github.com/dkorecko/PatchPanda

It doesn’t just update you containers, it checks the release notes too.

If you have more than one server, running a tang server is super easy. Clevis can then be used to unlock a LUKS partition automatically on boot.