suicidaleggroll

It’s not an either-or scenario. Running services in Docker/Podman is great and makes a lot of sense, as you’ve found. But there’s no reason the OS running those Docker containers can’t be a VM on a hypervisor like Proxmox. Then you get the simplicity of Docker, in addition to the isolation and segmentation (network and process) provided by VMs, and snapshot-based incremental backups from PBS. It’s the best of both worlds.

It’s literally one checkbox in the settings to shut those external media sources off

Either a lifetime pass, or you actually configured local access correctly instead of botching it and then coming to lemmy to complain.