• 1 Post
  • 9 Comments
Joined 3 months ago
cake
Cake day: March 26th, 2024

help-circle


  • My solution is to use Rathole. I rent a wildly cheap (2 core, 4GB memory) VPS and basically just run Traefik there. Then I use Rathole to make some services hosted on my desktop available to Traefik.

    I like this solution better than Wireguard for my application. It reduces attack surface to services you’ve explicitly set up, rather than a full data layer trunk between your machine and a potential malicious actor.






  • I’m an old man when it comes to major changes. If it’s salvageable then maybe stick with what you’ve got. Have you used lazy docker or watchtower?

    Lazy docker should give you a more reliable interface (TUI, over ssh, not a GUI)

    Watchtower (aims to) update your containers for you so you don’t have to go through this pain in the first place :)

    Personally, I run my Nextcloud and Jellyfin servers on NixOS with auto updates on. It’s been chugging along great!