all 42 comments

sorted by: hot top controversial new old
[–] 1 point 1 year ago
[–] 108 points 1 year ago (2 children)

go2rtc, a camera streaming tool that's useful for security cameras, at least has some humor in their choice


port 1984, of course.

  • source
  • hideshow 2 child comments
  • [–] 27 points 1 year ago

    Doesn't matter; we'll map it to whatever the environment needs in the docker-compose.yaml.

  • source
  • [–] 25 points 1 year ago (1 child)
  • [–] 24 points 1 year ago (13 children)

    As long as it is configurable, ideally via env, I dont care about the port.

    This could be important for restricted Kubernetes clusters (or certain Gluetun configs). Don't be Nextcloud with their default port of 80 in their Apache image with only hacky ways to change that. God, I hate Nextcloud. They are truly becoming the next Wordpress.

  • source
  • hideshow 13 child comments
  • [–] 5 points 1 year ago (2 children)

    Vaulwarden does this and I'm really frustrated that I have to cap_add NET_BIND_SERVICE in my rootless setup just to make my password server run.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago (1 child)

    Are you sure you need that? I just added a —user to the docker run and it started just fine on port 80 in the container.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 year ago

    I'm using podman, and I don't like the practice of unnecessarily setting UIDs. NET_BIND_SERVICE is exactly the flag it needs to set port 80 and it doesn't potentially complicate accessing the files for maintenance. Does your system have SELinux? If not, that might be why you don't need it lol.

  • source
  • parent
  • [–] 4 points 1 year ago (9 children)

    The docker image you just set the port like any other program.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 2 points 1 year ago* (last edited 1 year ago) (8 children)

    Unless I am missing some obvious setting: Restricted Kubernetes doesnt work like that. You have to run the container with a non-root UID (usually something upwards of a million). Non-root users however can't reserve ports below 1025. Nextcloud builds on the default php-apache image which comes with the default apache ports.conf (Listen 80).

    So now this has to be overwritten either by making a custom build (which may require creating a custom build pipeline) or by mounting a new config file (e.g. via ConfigMap) else it wont start. Both are an additional update risk which now has to be documented and checked before updating in addition to changes from the normal nextcloud changelog.

    Similiar issues probably appear with rootless docker/podman unless you add extra capabilities, which is not possible in restricted kubernetes settings.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 2 points 1 year ago (7 children)

    I know nothing about k8s, just started with a homelab using primarily docker in an Ubuntu LXC in proxmox and have been using the nextcloud image via docker compose on a different port by simply editing the compose to outwardly point to a different port, inside the docker container my understanding is it all still uses port 80, thereby causing no further issues with the application.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 1 point 1 year ago (6 children)

    Welcome to the community then :) For rootful Docker you are correct - the inside port can be 80 and you can expose it on whatever port you want (ideally you expose it only via reverse proxy and not by port - I can recommend Caddy-Docker-Proxy for that)

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 1 year ago (1 child)

    If you're using a reverse-proxy, why bother mapping ports at all?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago* (last edited 1 year ago)

    Absolutely, it is not necessary if the proxy can reach the service in other ways (e.g. a shared network). Some non-http services don't like to be proxied though. Some constellations where the proxy is not on the same host as the containers may also make it necessary. My answer was based on the possibility to not have the same inside/outside port, not necessarily the need though😉

  • source
  • parent
  • [–] 1 point 1 year ago (3 children)

    I use Traefik already, but thank you! :)

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 year ago (2 children)
  • [–] 21 points 1 year ago*

    adds a one to it

    next app...

    ports:
     - 8081:8081
    

    Ughhhhh

  • source
  • [–] 19 points 1 year ago (2 children)

    Psh, we choose 443 and you know it! Just don’t ask me if we correctly enabled HTTPS…

  • source
  • hideshow 2 child comments
  • [–] 12 points 1 year ago

    Call me crazy, but I like default ports to look like default ports. If I want it to stick around, I’ll pick a port on my own.

  • source
  • [–] 11 points 1 year ago (1 child)

    Imagine using 8081 while 8080 is free. Truly criminal

  • source
  • hideshow 1 child comment
  • [–] 8 points 1 year ago (2 children)
  • [–] 8 points 1 year ago
    [–] 7 points 1 year ago* (last edited 1 year ago)

    That’s because 8080 is the official unprivileged alternative port for 80, the HTTP port. Web developers are usually using HTTP, so this makes perfect sense. If it supports HTTPS, then 8443, though that one isn’t official.

    I run a few open source server projects, and they usually default to 8080 for this reason. I have one that uses 8888, and that’s only because it’s meant for temporary ad-hoc servers.

    I’m working on an SFTP server, and it will use 2222, because that’s the most common unprivileged alternative port. There is no official alternative for SSH.

  • source
  • [–] 13 points 1 year ago (3 children)

    I mean, if you're serving over http, that is the port for it

  • source
  • hideshow 3 child comments
  • [–] 13 points 1 year ago (2 children)
  • Everyone out here acting like they don't use 9001

  • source
  • [–] 5 points 1 year ago (2 children)
  • [–] 3 points 1 year ago

    Can't use 80 or 8080? Lets use 12380!

  • source