yes
yes
First set up your certificate in the SSL tab of NPM. You can either upload a traditional certificate or set up LetsEncrypt. Be aware that starting next spring the maximum length of a certificate will drop to 9 months and continue to decrease over the next few years until its 47 days.
I have mine set up so LetsEncrypt gets a wildcard cert for my domain (via DNS challenge). Some people go with per subdomain certs.
Once you have the cert, go you each of your hosts and switch to its SSL tab. Then select your cert. Then I usually turn on “Force SSL”
I use Nginx Proxy Manager running as a docker container. Its a gui that makes administration more straight forward. It points at all my services (docker and otherwise) and handles the SSL for me. Because I don’t want to have any ports open I use DNS challenge ACME and NPM has built in support for a number APIs from large public DNS providers to automate that.
Software from the 80’s? Get that new fangled garbage outta here. If it doesn’t predate the first Alien movie it’s probably full of bugs.
If root on every linux machine is Santa, that explains how he gets so much done.
For those unfamiliar, Dawarich is a self hosted location tracker / timeline
Thank you for that. Its surprising how long that takes to answer when I see some release announcements. Especially over on Mastodon.
Yeah. They all come with risks, but I psychologically struggle to run shell scripts unless I know what’s in them. And the same brain dysfunction makes my automatically distrust a script that doesn’t set pipefail.
I never fully trust a shell script and usually end up reading any I have to use first, so I know what they do. And after so many years dpkg holds no mysteries for me and Discover will install .debs if I double click while in KDE.
A stab at my personal ranking: .deb > appimage > flatpack > curling a shell script
I can’t help but love a .deb file (even when not via repo), I’ve almost exclusively used Debian and it derivatives since the late 90s. And snap isn’t on the list because it got stored in a loopback device I removed.
I use Proxmox because its handy to be able to use both LXC containers and full VMs. I installed it as an ISO so its built on top of Debian. There are helper scripts specific to installing Home Assistant on a VM (as well as a number of other things). And the proxmox UI comes in handy.
I have Home Assistant in a VM so I can run it on top of HAOS. Then the rest of the box is set up as an unprivileged LXC where I installed docker. I run all my *ARR apps straight on my Synology (via docker) so they have fast access to my Library volume, and everything else running on the setup I just described. Then I use Portainer to maintain my containers so I can manage both the syno and proxmox docker installs from one page.
Not true at all. If you want to run Home Assistant on top of Home Assistant OS then it needs to be on bare metal or a full VM because its an OS. Running on HAOS is easy mode, but not required.
Sure, Linus and Richard get praised for making GNU Linux. But when I tried to make by own, the zoo kicked me out of the water buffalo enclosure.
The first language I was fluent in was Perl so PCRE is second nature to me. But then everyone decided they wanted their own regex dialects. And now there’s a PCRE2? Why 2? Stay with 1, you’re good together. What about the kids?
There’s an OS that doesn’t require command line use to do anything slightly advanced? That hasn’t been my experience.
Wouldn’t the one that ops you into telemetry be the trap?
btop could be pretty controller friendly
Its only been a few weeks, but I should give it a good blowout regardless.
Good call. That’s plan b now.
Thanks!
I spent half a dozen hours this weekend trying to get Proxmox running on a 2nd hand laptop, but I can’t get it to run without sounding like a jet engine. The machine did fine when I ran Mint and used it as a laptop - but even after blacklisting the dGPU and forcing all the CPU cores to powersaving, I’m still making heat like crazy.
Plan B is to put Mint back on it and install podman and see if fan noise is a problem then. But I’d rather have podman running in an unprivileged LXC.
I was excited for IPv6 in the 90s.