• 0 Posts
  • 13 Comments
Joined 1 year ago
cake
Cake day: January 7th, 2025

help-circle




  • Thank you so much for your response!

    I feel the same way. I was looking into a Udemy course for those Cisco exams (not to take the exam, just to learn) and I was discouraged that the content is so vendor specific.

    Do you have a recommendation on “neutral” learning? I have access to a fair amount of Udemy of that helps. Also happy to read static text, though preferably written as more of a tutorial than just a raw RFC or man page.





  • Do you place any restrictions on the containers or the container daemon as a whole?

    Moreso asking so I can copy your settings. But I have had my server brought down just from the services themselves consuming too much memory or disk space, so something to look into if you haven’t already.



  • Yay!

    Should I learn iptables or is it more sane to use a front end like ufw?

    I have an RPI with dual Ethernet between my modem and consumer router so I don’t have to depend on the obsolete and limited consumer router software. I’m using OpenWRT at the moment but curious if you have other recommendations. I like the Luci gui so if I switched to headless Debian or something then I’d still want a luci equivalent.

    I’m self hosting with docker and I want to set up a wireguard vpn container that joins a network with a select set of containers. So I’d have containers that are accessible only by actual LAN users and then others that are in this isolated group that only the VPN (i.e. WAN people) can access. I thought that’s what docker was all about! But by default it seems all authenticated VPN peers just get to be on the LAN. Sure, they can’t get at containers on a different docker bridge network, but they get to access the host itself! This is why I asked about iptables above, but it’s daunting. Any ideas on how to achieve “two levels of trust” for self hosted services?


  • I’m in the process of getting this going in my lab. I appreciate these efforts to find alternatives.

    That being said, can I get some opinions so I can pare down the list?

    Would be great to have E2EE and audio. Video bonus. I don’t think I’ve got much in the way of preferences beyond that.

    My latest leaning is hosting the Matrix protocol.

    Also the only friends I have that would be willing to move off the easy corporate software are tech literate, so I have the option to distribute VPN confs and the like. Has anyone hosted chat over their own VPN, or does that just become a mess because STUN/TURN needs to be “free”?

    (Sorry I’m still learning a lot here)