sem

Thanks for the recommendation! Are there eBay search terms I should know? Used PC workstation?

I'm not sure if matrix will ever be able to overcome this hurdle

In an ideal world I'd host on an Intel nuc or similar, but for the time being a raspberry pi 4 is all I can afford.

I think you're right, it was running out of ram before. It hasn't done that since I've moved to nextcloudpi, thankfully.

I have a separate raspi 4 with yunohost that was slated for other experimental purposes, like Jitsi, but I'm still early in that process.

Thank you everyone for the suggestions, I learned a lot and I'll continue to check back also.

My nextcloud raspberry pi server used to crash when it tried to do anything difficult, like open too many photos in a row. I adjusted some settings to try and keep it from running out of memory, but I'm not a very skilled sysadmin, and I'm using nextcloudpi now which adds another later of abstraction in an attempt to have saner defaults.

In a perfect world I would do this, but for nextcloud at least, I have to be able to access it from public computers where I cannot install and configure tailscale.

Sometimes I want to share services with friends and family too.

And Synology support for tailscale sounds like it's finicky unfortunately.

Interesting, I already use cloudflare DNS and had "proxy" turned on for nextcloud, but I still had to open 80 and 443 on my router, so I'll look up how to set up the free tunnel sometime

Thanks for the information. I will have to look into SNI and see if my router can support it -- if I move someday to an ISP behind a more restrictive firewall, this system looks pretty good. (Or if I get unhappy with one reverse proxy handling everything).

Thank you, this looks like a great guide

Thanks, this is definitely the way I would like to go!

1. Can Caddy forward requests to other machines on the LAN?
2. Have you ever had to mess with HTTP headers?
3. Do the docker containers have to get certificates from let's encrypt, or is caddy the only part that needs to manage a wildcard certificate?

I would like to use tailscale for some services, but the ones I access from public computers, like nextcloud or blog hosting, can't be behind a VPN.

I would love the Synology to Synology backup to be behind the VPN, but I'm not sure I'll be able to get it working, so that is lower down on my list.

Things like Jitsi would be cool to have behind the vpn, but then I'd have to get everyone to install tailscale on their phones and configure access, so that's going to be too complicated for me and my family unfortunately.

There is a theory that sanctions against a country with a tyrannical ruler hurt the common people more than the oligarchs / dictator. But eventually they do make life more difficult for that ruler