• 0 Posts
  • 25 Comments
Joined 3 years ago
cake
Cake day: July 14th, 2023

help-circle

  • This is close to make my setup is as well, mine is all in docker though and with a treafik reverse proxy as the only entrypoint. To help minimize my security risk I have a few middlewares, crowdsec and geofilter. Everyone that requires access are all in one country so I drop all other connections.

    I do have private and internal applications as well and use Netbird self-hosted over tailscale.

    Also because docker networking can be a little permissive I updated the nftables to drop attempted requests to my local network.

    I never heard of pangelin thanks for bringing my attention to it.







  • This has been my journey.

    I started with pure docker and hostpath on an Ubuntu server. This worked well for me for many years and is good for most people.

    Later I really wanted to learn k8s so I built a 3 node cluster with NSF managed PVC for storage, this was fantastic for learning. I enjoyed this for 3 plus years. This is all on top of proxmox and zfs

    About 8 months ago I decided I’m done with my k8s learning and I wanted more simplicity in my life. I created a lxc docker and slowly migrated all my workloads back to docker and hostpath, this time backed by my mirrored zfs files system.

    I guess my point is what are you hoping to get out of your journey and then tailor your solution to that.

    Also I do recommend using proxmox and zfs.