m5l.eu is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
Spun up NetAlertX in Docker โ it maps my LAN, resolves hostnames, and tells me when a rogue device appears.
Now to work it so it can talk over the VPN to my other lan (my better lan?)
#Docker #Networking #SelfHosting #Homelab #FOSS #NetworkSecurity #sysadmin #tech #tinkering #netsec #cybersec #cybersecurity
Deparei-me com o problema de #Docker interferir no #firewall antes do ufw
. Acho que tinha sido bem por isso que acabei instalando firewalld
em outra mรกquina. Minha memรณria รฉ curta demais. Enfim, agora nรฃo estou mais a fim de desfazer o esquema todo com ufw
e queria saber como costumam resolver essa questรฃo.
Vi sugestรตes de desativar o iptables
no /etc/docker/daemon.json
. Mas isso nรฃo รฉ necessรกrio justamente para o Docker gerenciar as redes dele? Como fica isso depois?
Homepage is a really nice dashboard with tons of functionality. Just fiddled a little with and i'm impressed! ๐ (Screenshot attached with my current setup)
Link: https://gethomepage.dev/
Live location is very sensitive data, but #selfhosting the server with TLS and basic authentication gives me more privacy than the big tech cloud. And it only needed reading a bit of MDN and making a basic #Docker image based on #NodeJS
๐ฃ Know someone who uses Docker but hasn't tried #FreeBSD jails yet?
Tag them below and tell them why Bastille on FreeBSD is worth a look!
Added ๐จ๐ฃ๐๐๐ง๐ ๐ญ - ๐ง๐ต๐ผ๐๐ด๐ต๐๐ ๐๐ณ๐๐ฒ๐ฟ ๐๐ผ๐บ๐บ๐ฒ๐ป๐๐ to the ๐๐ฟ๐ฒ๐ฒ๐๐ฆ๐ ๐๐ฎ๐ถ๐น๐ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ article.
https://vermaden.wordpress.com/2025/04/11/freebsd-jails-security/
#containers #CVE #docker #freebsd #jail #jails #linux #podman #security #server #vnet #cve
This time it's #Debian with #Docker. I used to avoid containers, preferring to run services directly instead. But setting up backups made me appreciate the separation between the application data in image and persistent state in mounted volumes. The final piece that convinced me is the ability to self-host my own container registry with @forgejo@floss.social
I'm doing the initial setup through #Ansible (learned from @notthebee@tilde.zone), but specific applications are managed via dockge. The ambition to do every adjustment through playbooks burns out really fast when working with a single instance.
Writing a single bash script that turns a clean #Debian install into an opinionated #selfhosted setup (the one that I use myself) with:
* #Docker
* #dockge as web UI for managing docker-compose stacks
* @tailscale setup to expose deployed services with TSDProxy as separate TS domains
* Restic for data backups
Anybody interested?