I run this server
I use swarm in my home lab, I don’t have any docker things at work so Kubernetes is way more then I want to manage.
All my stacks are in a git repo, I have an ansible playbook to update them if needed. I also have most things tracked on new releases (https://newreleases.io/) so I know when something needs an update, then I can either update the git repo by hand or use ansible.
Also have a look at docker contexts, you can manage your swarm from a remote location.
So I need to make a VPS setup script to install bind for DNS and wireguard or openvpn and push it to gitlab/GitHub?
It is very simple, I run it from docker and it can plug into all sorts of places, I have nginx config that I could share if it helps.
This is the tool https://oauth2-proxy.github.io/oauth2-proxy/
maybe a look at this site will help you -> https://osm-apps.zottelig.ch/
Nextcloud deck is the Trello like thing
I have also looked at weken and taiga
Depending on the login flow, I have a lot of stuff behind an oauth proxy. So that you have to have a working 2fa account to see the non 2fa system behind.
Electric shock to you? Get an electrician to check it and sign it off?
I have my portainer behind an oath proxy, using keycloak as the Auth provider
I would have a cron that runs a script to pull the list and update IPset, this might not work.
make a file on your docker server with the below in it, set the file to execute chmod +x file.sh
#!/bin/sh
ipset -q flush ipsum
ipset -q create ipsum hash:ip
for ip in $(curl --compressed https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -v -E "\s[1-2]$" | cut -f 1); do ipset add ipsum $ip; done
iptables -D INPUT -m set --match-set ipsum src -j DROP 2>/dev/null
iptables -I INPUT -m set --match-set ipsum src -j DROP
Then add a cron file in /etc/cron.d that runs the script every 24 hours
10 3 * * * root /root/file.sh
Some thing like this
iptables -I DOCKER-USER -m set --match-set ipsum src -j DROP
Should do what you need
I use pihole as my home DNS to do that
not sure your example domain is the best, can you lookup hrowood.biz?
this might be what your looking for -> https://docs.pi-hole.net/guides/dns/unbound/
great work, But I haven’t got 0.19.4 sorted yet
noted
this is in from Proxmox
Today at 08:50: no, only the no-subscription repository is affected. a package was moved a bit too early yesterday and it seems the retraction was incomplete, we'll see about getting this fixed ASAP.
Today at 09:15: please just hold off upgrading for the time being - the check aborts the upgrade early enough so that there is no urgent action that needs to be taken while we are fixing this.
24 minutes ago: pve-no-subscription repository should be fixed again.
if you followed the advice here and have installed proxmox-backup-client 3.2.5-1 to work around the warning, please be aware that that version has opt-in experimental features that might not yet be ready for prime time. unless you explicitly invoke vzdump or proxmox-backup-client with parameters to enable those features, it should still be safe.
not tested this, but you might want to look at DHCPv6 Relay to get an IP from your ISP router
Ok, Aws is 24/7. But they will just help you spend even more money
I use nextcloud to sync our photos, with the memory’s add-on and mobile app you can even have collections.