How do you login from a device that doesn’t have Bitwarden on it if you have passkeys.

For example a friend’s computer etc

With a password I can type the 20 or so digits of the password. Can’t really be done with a passkey as far as I know

Vaultwarden itself is actually one of the easiest docker apps to deploy…if you already have the foundation of your home lab setup correctly.

The foundation has a steep learning curve.

Domain name, dynamic DNS update, port forwarding, reverse proxy. Not easy to get all this working perfectly but once it does you can use the same foundation to install any app. If you already had the foundation working, additional apps take only a few minutes.

Want ebooks? Calibre takes 10 mins. Want link archiving? Linkwarden takes 10 mins

And on and on

The foundation of your server makes a huge difference. Well worth getting it right at the start and then building on it.

I use this setup: https://youtu.be/liV3c9m_OX8

Local only websites that use https (Vaultwarden) and then external websites that also use https (jellyfin).

Security in layers.

All your services should be using https. Vaultwarden in particular won’t even run without https unless you bypass a bunch of security measures.

This is how to setup local only and external https, I highly recommend this as a baseline setup for every homelab. It allows you to choose how much security you want on a per app basis and makes adding new apps trivially easy.

https://youtu.be/liV3c9m_OX8?si=TSWXoN_8SJDpAHaW

Anyone with the knowledge to self host will quickly discover 3-2-1. If they choose to follow it, that’s on them but data loss won’t be from ignorance

Borg backup to borgbase is not very expensive and borg will encrypt the data plus the vault is also encrypted

Keep vaultwarden behind wireguard for local only access then also use https certs and good master password. Very secure like this

Is this useful for a homelab with a current setup of 1 physical host -> proxmox -> alpine VM -> docker?

Docker is managed by portainer that pulls docker compose files from a git repo. Around 30 containers total in 10 or so stacks.

This idea looks really interesting but it seems to be mostly for kubernetes deployments

So far everything has been very lacklustre. This update just got announced. Maybe it will be better?

https://www.phoronix.com/news/Fedora-41-KDE-Mobile-Proposal

I like this version of fedora atomic with KDE

https://getaurora.dev/

I have an atomic variant of fedora 40 (Aurora) and it just works on an Intel CPU with integrated graphics. I have a USB c dongle with HDMI out and it just works when I plug it in.

I also tried it on my steam deck dock the other day and it worked without issue.

Fresh RSS if you want a self hosted option

Conversely I have a dell xps from 2018 that run very well with fedora atomic (kde). I upgraded the SSD, WiFi card and replaced the battery. Should easily last me another 5 years

Thanks for this list!

And good resources on how to learn to use Toolbox properly?

Does anyone know if Timeshift has any use with fedora atomic distros?

I tried to find this on DDG but also had trouble so I dug it out of my docker compose

Use this docker container:

prodrigestivill/postgres-backup-local

(I have one of these for every docker compose stack/app)

It connects to your postgres and uses the pg_dump command on a schedule that you set with retention (choose how many to save)

The output then goes to whatever folder you want.

So have a main folder called docker data, this folder is backed up by borgmatic

Inside I have a folder per app, like authentik

In that I have folders like data, database, db-bak etc

Postgres data would be in Database and the output of the above dump would be in the db-bak folder.

So if I need to recover something, first step is to just copy the whole all folder and see if that works, if not I can grab a database dump and restore it into the database and see if that works. If not I can pull a db dump from any of my previous backups until I find one that works.

I don’t shutdown or stop the app container to backup the database.

In addition to hourly Borg backups for 24 hrs, I have zfs snapshots every 5 mins for an hour and the pgdump happens every hour as well. For a homelab this is probably more than sufficient

Fair enough, I primarily use NFS for Linux to Linux sever communication and high file access.

Smb is mostly for moving files around occasionally

Not sure if trying to run a database over smb is a good idea but I do it on NFS all the time

Regardless it doesn’t have to be exclusive. OP can change it up depending on the application

You can use both without issue. I use NFS to share between two Linux servers (unraid and proxmox/dockers) and then some of those same folders are shared via smb for desktop windows or Linux laptop.

Aurora dev edition is the bazzite equivalent for devs. Containers built right into the terminal (ptyxis).

Self hosted AI seems like an intriguing option for those capable of running it. Naturally this will always be more complex than paying someone else to host it for you but it seems like that’s that only way if you care about privacy

https://github.com/mudler/LocalAI