Many nice programs have been stated here but I’d like to throw Media CMS in the mix

Write the post and then upload the image?

You could technically use this one and just mount everyone else’s videos as network drives https://github.com/mediacms-io/mediacms

Yes there is something that’s exactly what you’re looking for: https://github.com/mediacms-io/mediacms

I use trillium that gets backed up every hour to my pc.

I also do a lot of python development so my project ideas get written down there too.

I’m not a fan of code is documentation because what happens when you step away for a month and you need to figure something out? In trillium I have a search bar. What do you have in the code?

I’d rather not mount the docker sock into my reverse proxy,

You don’t have to if you use the dynamic file config. I’ve mentioned this before and debated to the ends of earth for even suggesting such a thing. But it all aspects is dynamic file configuration better.

Of you use IaC in your set up, it gets even easier because then you can just set up templates that automatically create file configs and add them to your reverse proxy seamlessly.

Right now with one Terraform apply, I create my docker container, traefik config and my homepage service.

Headscale the self-hosted server is unofficially but decently supported by tailscale the company. They employ the dev and don’t seem to be trying to kill the project or mess with it much.

Probably because they’re smart and realise the people who self host probably wouldn’t spend money on tailscale, and those who’d buy tailscale subscriptions wouldn’t have the time/resources to self host it. Win win.

Yes. I bought a libre pi to use as a backup DNS. Besides the minor tweaks, it’s been running perfectly. Also only ~€75 for the libre+case+SD card combo.

Why don’t you just dockerize treeline? It’s all python and Java. Looks easy enough.

by redeploying the stack

That’s the point. With dynamic files you can add new Middleware or even route already exposed ports all on the fly. You’re telling me you can change a docker label and keep your service running with 0 downtime?

If you’ve figured that out please share a link because my experience has been otherwise.

What I haven’t figured out yet is whether or not I can give my docker services their own IP on my router for access from another system on a fixed or reserved IP.

You can. You have to set up a macvlan on your network and then assign an IP to your container that sits on your router’s subnet.

I can only use traefik with a macvlan because Synology DSM uses ports 80 and 443. I assign traefik its own IP and use pihole’s DNS to route wildcard subdomain to it.

I wrote a guide in my trillium notes. If you’re interested I can share.

For those using traefik I would recommend the dynamic file config. You don’t have to take down your containers just to change a proxy setting.

Bitwarden has a CLI that you can script with. Also vaultwarden is the FOSS version.

Just in case you want to try.

Thanks. I knew about bit/vaultwarden but I just looked and I see that there is a Terraform module and the UI looks good.

Thanks.

I wish there was something between hashicorp vault and keepass. I want a nice simple UI that even my family could use with Terraform integration. Anyone know of such a program?

I suspect they are both using the same interface wg0. I did a quick Google and it looks like you can do the following in gluetun

WIREGUARD_INTERFACE=wg1

This is my suspicion as you’re using essentially two wireguard instances at the same time.

Trilium for notes, Jellyfin, jupyterlab and komga

Tailscale comes in my Synology packages and just works. Haven’t looked at zerotier yet.

Do what you want. Everyone started somewhere. If yunohost is yours then so be it. If you like it, stick to it. If you grow tired of it, move on.

I would use terraform to provision servers, and go with a “backup, automate and deploy” approach. Documentation would be a plus

Yea. This is what I do. Other than my Synology, I use Terraform to provision everything locally. And all my pi holes are controlled by ansible.

Also everything is documented in trillium.

Whole server regularly gets backed up multiple times, one is encrypted and the other via syncthing to my local desktop.