You can do that with Wireguard and NAT.
Findmysec
Traefik's marketing as the "Docker reverse-proxy" put me off since I like technologies to stay agnostic of each other (personal preference).
Your arguments are correct, and usually I'd run a separate web server but I suppose for a homelab having less things to manage is great
Indeed, I don't find NGINX that easy to configure either
I have heard a lot about Envoy proxy from Istio but never looked into it for baremetal usage. I'll keep an eye out, thanks
It should technically do that already, but as extra insurance I'm running it with the -u bind
flag in ENTRYPOINT
. The problem was solved with a chmod 755
Thank you, chmod 775
worked
Thank you, I'll keep that in mind. I didn't actually mount volumes into the container yet, the problem was solved upon changing to chmod 755
I think ZFS does some advanced stuff which makes it better than just relying on hardware checksums (which have been shown to not be so great)
How about bitrot?
Yeah I'm looking for something like this for Linux desktop
Does it work on desktop? Linux?
Thanks I changed it to
chmod 755
and it worked