231–240 of 456 posts
Of course I also like messing with that kind of thing and being in control but those are not the main reason.
edit oh and I’m 100% through someone else hosting and messing with my calendar and contacts, which Nextcloud does fine for me.
Earlier quoted context omitted.
Caddy is great but there sadly isn't anything like nginx-proxy-manager for it. The proxy manager is actually a full little identity provider and authenticating proxy--it's very slick and perfect for simple home self-hosting scenarios with a handful of users.
I use caddy for the oidc/oauth letsencrypt combo. Does nginx-proxy-manager support oidc? Reading the docs, I see only http basic auth.
Earlier quoted context omitted.
Caddy is great but there sadly isn't anything like nginx-proxy-manager for it. The proxy manager is actually a full little identity provider and authenticating proxy--it's very slick and perfect for simple home self-hosting scenarios with a handful of users.
Could you please go into more detail regarding "a full little identity provider and authenticating proxy"? Does nginx-proxy-manager do something like SSO?
It doesn't do SSO with SAML, OIDC, etc. like more heavyweight solutions. It's basically just a database of users (not even LDAP, it's all internal) who you grant access to proxied apps. Internally it just uses nginx's forward auth proxy support to do all this, it's not using anything complex or fancy. You'll have to configure proxied apps to read the logged in user from a header that nginx sets on redirect (most apps can do this, but not all).
edit: Spin up a docker container of it to kick the tires, it's very easy to get going and see what it can do: https://nginxproxymanager.com/guide/#quick-setup
Self-hosting is still way too hard. Running your own Plex server on an old laptop shouldn't be any more difficult or less secure than installing an app on your phone. Folks shouldn't have to understand DNS, TLS, HTTP, IP addresses, ports, NAT, CGNAT, port forwarding, etc in order to run a server application on their own hardware. I think we can build usable abstractions around most of it, while being secure by defaul…
Docker and Tailscale are all you need. I have all my services in single docker-compose yaml.
People really should give Caddy a try. It's a nice breath of fresh air and make you figure nginx config is such a bloat. my.domain { reverse_proxy 10.0.0.2 } is all you need to get https://my.domain running with automatic Let's Encrypt.
$ caddy reverse-proxy --from my.domain --to 10.0.0.2(Disclaimer: I wrote it.)
Perhaps only barely fitting the definition, my most used application is ESXi on a intel Mac Mini which runs VMs for Ubuntu & Windows. I lost the ability to use Windows software that interfaced with devices over USB when I got my M1 MBP - or so I thought - until I learned that you can share USB devices over the network to a VM running on ESXi. So now I have my windows ham radio programming software (uses a USB-Serial…
Can you flesh out the whole “share usb devices over the network”? What are you using to do that? Thanks!
My main goal is to replace cloud services so I can be Google-free. I've also got LineageOS + MicroG on my phone. This is all running in docker containers on NixOS (other than OPNSense), with automated restic backups to a NAS as well as Backblaze. One of my goals is to be able to deploy all this again from scratch with minimal effort, and I think I succeeded, though haven't had to test it yet. Nextcloud - for caldav a…
Over time I've tried to whittle down my homelab and move more of it to Microsoft 365/Google Suite/iTunes Store with mixed results. Currently my must haves are: * Router - pfSense - https://www.pfsense.org/ * Movies/TV/Home Videos - Plex * Minecraft Server - AMP - https://cubecoders.com/AMPInstall * Music - Roon - https://roonlabs.com/ * Automation - HomeAssistant - https://www.home-assistant.io/ * Unifi Controller *…