Lem453
@Lem453@lemmy.ca
- Comment on Dedicated admin account or normal privileged users? 3 weeks ago:
This is the way
- Comment on Dedicated admin account or normal privileged users? 4 weeks ago:
Keep your personal account separate from the admin. Don’t even think of making other users admin on a self hosted server.
If you need to login, open a private tab in your browser and use a password manager to quickly login with admin credentials.
- Comment on Issues with https certs locally 1 month ago:
This is for traefik but might help to understand the process and change it for caddy
You should have
Service.local.domain.com
For local only services (Vaultwarden) and
Service.domain.com
For external things (immich)
I’m your router / Pihole locally, you setup the above URLs to point to the IP of caddy
- Comment on How to physically isolate a camera with OpenWRT, tagged VLANs and Docker 2 months ago:
I did this using a POE switch to both power the cameras and also have that entire switch on a VLAN. On my OPNSense, that vlan only has permission to send or recieve packets to home assistant which is on my main LAN. They have no other access to anything including each other on the camera vlan.
Other than the initial setup, the only interaction I have with the cameras is via home assistant. This allows them to be completely isolated and still have remote access as per usual with home assistant.
My HA is using the all in one VM setup on Proxmox. I would highly recommend HA installed as a VM rather than Docker due to the ease if installing plugins. After that the above setup will keep your IOT devices nicely isolated.
- Comment on Good resources for setting up a domain name to a local Caddy instance 2 months ago:
This is traefik, but its worth watching this because local SSL and external SSL setup is amazing and highly versatile for homelab
- Comment on Selfhosting Sunday - What's up to date, selfhosters? 1 year ago:
Keeping 80 open is useful so that traefik can redirect all traffic to 443 (https)