this post was submitted on 28 Feb 2026
40 points (97.6% liked)

Selfhosted

56990 readers
525 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I've been self hosting traditionally in debian, but I would like to be able to add services easier using docker. As such, I'm looking to move to a container based architecture.

One place I struggle is that I can't seem to find a good container where the default image supports ACME to support Let's encrypt for automatic cert renewal.

For Nginx, I would have you build my container. HAproxy ACME support seems to be a shell script.

Any suggestions?

you are viewing a single comment's thread
view the rest of the comments
[–] reabsorbthelight@lemmy.world 3 points 17 hours ago (1 children)

I'm considering moving to Talos, so I imagine Traefik would work better in k8s right?

[–] silenium_dev@feddit.org 2 points 13 hours ago* (last edited 13 hours ago) (1 children)

Traefik also supports running on K8s, yes.

On that note, if you're moving to K8s, I recommend looking into K8s Gateway API, it's the successor to the old Ingress API. There are other, more complete, implementations of it than Traefik. See https://gateway-api.sigs.k8s.io/

[–] reabsorbthelight@lemmy.world 1 points 9 hours ago (1 children)

Which gateway implementations would you recommend?

I'm looking to support HTTPS and Webdav

[–] silenium_dev@feddit.org 1 points 1 hour ago* (last edited 1 hour ago)

I'm using istio (in ambient mode, so it doesn't put its sidecar into every pod I create), and Nextcloud behind it, works flawlessly. It does consume a bit of time to set up properly though.

TLS certificates are handled via cert-manager, which works with both Ingress and Gateway API, independent of which implementation you choose.

I've also tried envoy gateway (had issues with uploading larger files via Nextcloud Web UI and Gradle publish to maven repo).

Cilium (a CNI) also has an integrated Gateway and Ingress API implementation, works fine, but lacks some of the most recent stable features, and quite some experimental features. But if you just need a HTTPS gateway without much fuss, it's rock-solid. Setup time is also minimal for the Ingress/Gateway controller part. Cilium CNI on the other hand takes a lot of time to understand and configure, if you're unfamiliar with networking in general.

Traefik's featureset is comparable with Cilium's Gateway API implementation, also works, simple to setup, and might be better suited, if you're already familiar with it using docker, as it's the same concepts, just slightly different config (docker labels vs. Ingress/Gateway API with Traefik specific annotations).