Findmysec

Now look here chap, Quadlet admittedly works fine. I personally just k3s anyway but .pod files work too.

Isn't being obedient to SELinux a good thing? You could set it to permissive if you want, but MAC systems are essential for security and I personally wouldn't go without them

I guess z-library needs to make a template on how to get a setup like theirs working. Unlimited subdomains lmao

Can someone explain to me why these services were on the clearnet to begin with?

Funnily enough Docker compose has never worked for me on Podman. There always seems to be something that is incompatible (also due to me running on Debian). However, I feel like it should become a standard amongst homelabbers and professionals to use Kubernetes manifests going forward, since it is the most portable.

NFS is a pain, no question about it. I used to use longhorn but these days since I'm doing a single node k3s I'm just doing hostpath. It's that PVCs make intuitive sense to me, but I guess podman will likely work just fine for such cases other than canary deployments and OOTB service-meshes

Well I guess podman works fine for the first few months. Interestingly I still use build-ah heavily for building my custom images

Not needing Kubernetes is a broad statement. It allows for better management of storage and literally gives you a configurable reverse-proxy configured with YAML if you know what you're doing.

OP please forward this email and your story to Louis Rossman

Fail2ban + key-based SSH + self-hosted WAF if you can spin up another machine == 80% of your Web hosting problems gone

6TiB, backed up to the cloud. So 12TiB in total

Thanks for the comment, that was a good read

You can do that with Wireguard and NAT.