If you have your own domain and your DNS provider has an API, you can get a certificate for anything in your domain

OVH here, both domains, dedi server and a VPS.

Has an API to get an cert you want, even for non internet facing stuff

Snapcast might fit the bill, not sure about the 5.1 bit.

Does multi room sync

In my case I need to use a named volume for docker swarm, also I can reuse a named volume in other services. If your not using swarm then just a bind mount should be fine

with the way I do it, you can also use NFS as a backend

https://docs.docker.com/reference/compose-file/volumes/

but you shouldn’t be building out new applications and new environments on VMs or LXC

That’s a bold statement, VMs might be just fine for some.

Use what ever is best for you, if thats containers great. If that’s a VM, sure. Just make sure you keep it secure.

If you use a volume, you can mount that anywhere.

volumes:
  lemmy_pgsql:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: '/mnt/data/lemmy/pgsql'

Then in your service add a volume

    volumes:
      - lemmy_pgsql:/var/lib/postgresql/data:Z

I will be looking for cheap dishwashers when we need a new one, that don’t even know what the internet is.

Or making a shit appliances network, all the WiFi crap can live on that

I’m with him, what happens when my internet drops out (which it does on the reg)?

I can’t run the dishwasher cuz AWS us-east-1 is down

Yes, but no. There is still a lot of places using old fashioned VMs, my company is still building VMs from an AWS ami and running ansible to install all the stuff we need. Some places will move to containers and that’s great, but containers won’t solve every problem

would agree the hardware would run everything fine

right tool for the job mate, not everything works great in a container.

Also Proxmox is not legacy as its used a lot in homelabs and also some companys

I use proxmox to carve up my dedicated host with OVH, 3 of the vms run docker anyway.

If your router is setup to only allow in the ports with a service hanging off it, like SSH. Then a firewall wont add anything your router doesnt.

On the flip side, if your running any kind of VPS or directly accessible server, like a VPS or dedicated server. Then a firewall is required.

Now protecting your server from other things on your local network might something you want to do, think IoT stuff getting popped and being used to hack other things on the network

Keycloak here, I plugged my keycloak into my Google workspace. Yes I know Google!!

But the login flow is amazing and I get all the MFA without the faff

The morale of the store is, read the release notes to see what’s changing.

I don’t blinly update everything, but I do try to be on the more up to date end of things.

Case in point is nextcloud, that’s now on 31.0.0. I don’t ever jump to the latest untill the first point release is out, as nextcloud 31.0.1 is now out Wednesday night is nextcloud update time

If you run home assistant, that has a shopping list. We use that, most other things have a full on meal planner that I don’t want

If you run a single DNS server, you will always have downtime when it’s restarted.

The only way to mitigate that, is to run 2 DNS servers.

I setup my network to use pihole as the first DNS and the router as the second, most of the time pihole is used. Unless it’s down

Not sure about linking 2 HAs together, that could get complicated real quick.

If you have your DMZ setup, put HA in that and only allow web access from your main network. Also with camera, there is a feature to allow direct access if you and the camera are on the same network.

As a homelabber and systems admin, I would start with learning how to use Linux on the command line.

It’s all well and good looking at docker, but if you don’t know how to move about or edit on the command line. Your going to get stuck real quick.

Once your happy doing simple tasks on the command line, I would actually look at running something like wordpress on a pi or VPS. That will help you understand how to connect services together, and cement your basic command line knowledge.

I like the sound of that