Matt The Horwood

It’s really not much, but fire

I have my portainer behind an oath proxy, using keycloak as the Auth provider

your not a moron, networking is a learning opportunity. just need a way to debug your issue, thats how I go about all tech issues.

Most of what I know is on the job learning, I dont have any certificates in any of what I do.

this, most likely a netmask mismatch.

Make sure all 3 devices have a /24 (255.255.255.0) network mask

I use OVH for my dedi, they often have sales on -> https://eco.ovhcloud.com/en-gb/

With davx on Android to sync it all, even your contacts

I have pi-hole running for network level ad blocking, it always confuses me when not at home and I see ads

I’ve not seen nebula, that looks a lot like tinc. Iight have to see how hard nebula is to get running.

If your looking for a mesh VPN, tinc is very easy to setup

You could, that would keep home stuff at home

I would move the SSL to your VPS, make that your nginx entry point.

Then use virtual servers in nginx to listen on the wiregiard nic for local stuff and it’s public IP for internet accessible stuff, you could also add in some Auth service for things without MFA.

Yes, I had the same issue when I updated to 0.19

You might need to wait for lemmy to sort it’s self out before lemmt-ui is happy

Update lines 33 and 48 with 0.18.5, then do a docker compose pull and then docker compose up -d

Once lemmy is up and happy, then repeat for 0.19.1

I would move to 0.18 and then on to 0.19, how you get there will depend on how you setup in the first place. a look at your compose file would help

I use nextcloud to collate all my RSS feeds, I can then access them all from the nextcloud web UI or the mobile app

on top of ansible to setup system services and user accounts, I have found this https://github.com/andsens/homeshick to help getting my user settings back

does this help -> https://rss.com/blog/how-do-rss-feeds-work/

This is kind of how my setup looks, only without the DMZ. PFSense NAT to nginx lxc, terminates the SSL/TLS and then uses both my swam nodes as upstream for docker services. Docker services are behind traefik, each service is its own network in docker. If its a webby service you hit treafik not a port.

have you looked at awesome-selfhosted at all?

That sounds a lot like how I keep my stuff safe, I use backblaze for my off-site backup