I'd love to share!

I'll likely get a post put together tomorrow and tag you!

I just went through every compose file I had and removed all exposed ports (it possible that is) and required access only through my Caddy instance. Enabled HSTS for all sites.

And the entire lab is separated between 3 devices. A small form factor lenovo box (16GB of DDR4 with an i5), a Raspberry Pi 4 with 8GB of ram, and an old synology that was given to me. . Redundant DNS, a Technitium container, and my pi running Pihole.

DNS records and Caddy directives are set via Docker labels.

A combination of Signal notifications and Ntfy to alert me where necessary. That setup including unified push for a number of apps.

Music streaming, with a companion container that scribbles music, as well aa helped scripts that run on systemd timers thar sync music from live location, to backup 1, to backup 2 aka my desktop HDD. I have a heller script being run on a disposable docker container that searches for LRC files so I have synchronized lyrics for my music.

And a bunch more I am forgetting.

I like nerding out about this, and Lemmy is the only place I can talk about this where anyone understands. No one in my life IRL are tech savvy

Super lightweight, and a fixed IP is not necessary, but yes you need to expose it somehow if you actually want to use it outside your home.

Oh yeah it has a lot of nice features and the vulnerabilities it pretty in-depth, once it done it provides recommendations for fixing the vulnerabilities as well.

I currently have mine configured to check for updates, update and prune automagically then provide a report of what's been done to a private discord server

Depending on what you want out of Arcane, like the user above said it condenses the need for 3 or 4 separate container into 1 container all managed within the same gui. For me the simplicity of having it auto update my containers, restarting them if they become unhealthy, pruning unused docker volumes, unused networks, old container images has made container management a breeze

If you have any more specific questions outside of this or in general I'm happy to answer them 🙂

I keep my container volumes in sub-directory of that of the docker compose file and tar them up and put them somewhere safe. I spent ages trying to figure out how to back up a container, because I thought that the state of a database was in memory, which I suppose it is, but when you stop it, it's just a bunch of files like everything else, so I elected to keep it simple. I've been thinking of creating a cron job to do it routinely. I'm not sure what you mean regarding the codeberg question.

Ok, so reading the replies I see that it was meant for me.

All the relevant volumes are mapped to the actual filesystem on disk (like you do in docker compose, ig it's called a volume bind-mount?), so when I have to take backups I stop the docker container and manually cp/rsync/whatever from the directory.

The github and codeberg services are nothing but HTTPS checks for both of them

It just allows you to quickly make pages of content, like Wikipedia. It has a tree navigation and search. Here's a demo site: https://demo.leafwiki.com/home

Also, vaultwarden requires HTTPS?? Ah drat, that’s not good :/ I don’t have experience with that.

Yes, the clients work only over HTTPS. Caddy can handle that:

vaultwarden.cosmos.internal {
        tls /opt/caddy/certificate.crt /opt/caddy/private.key
        handle /* {
                reverse_proxy http://localhost:8081/
        }
}

The certs need to be generated for this specific domain:

openssl req   -x509   -newkey rsa:4096   -keyout key.pem   -out cert.pem   -sha256   -days 36500   -nodes   -subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=cosmos.internal"

Some more details are here: https://bitwarden.com/help/certificates/ under "Using a self-signed Certificate"

(I don’t think I still do 🤣)

Learning is one of the facets of selfhosting that I genuinely get a kick out of, and as you say, it is much fun. It's a very useful, very practical, and entertaining hobby for me. My servers are like a huge playground. I'm still that kid running out to the mailbox to get the latest edition of Byte magazine.

Also, I’ve seen you post here often!

Much to chagrin of some I am afraid. LOL I am an expert at nothing, but if I may be of service in any way, please do inquire. There are a lot of people here willing to help.