You don’t technically need to back up the PBS server as there’s not much there other than a basic config. As far as the backup data itself, you can mirror to another PBS server or I think it supports S3 for offsite storage.

The immich public proxy app is built for this, you run it on your isolated public VLAN, and it displays a shared album to people while loading the images from immich.

The SFF or MT form factors are a lot better, I’d say MT is the best as it has full height PCIe slots. Keep in mind the dell/hp/lenovo models all use proprietary motherboard form factors and power supplies, but not that big of a deal I think since there are so many parts available if something does break.

I highly recommend 7th gen intel or newer, as you get the much better quicksync support and quality.

If you get a desktop class CPU (i5-7500 for example), the whole computer will typically draw around 15W at idle with an SSD, which is pretty decent.

If you need less idle power draw then you’ll want a mobile/notebook class CPU (like an i3-7100u) as the idle usage should be less than 5W. But those typically only come in the micro/mini form factors.

Also good to remember that every 3.5" HDD draws around 7W when idle and spun-up (typically difficult to spin down on servers since there’s always some process accessing files).

Maybe run the public VPN at home with NAT enabled, and use it as the default gateway in the private VPN. Never done it but I think I’ve seen some guides on that concept.

KeePassXC + KeePassDX is probably the best option, with the downside of no way to sync easily (syncthing is probably the best option there)

I might switch back at some point, been getting frustrated with the bitwarden extension performance always being so poor.

Mostly just quick notes in Obsidian, if I do anything complex or ‘unusual’ to set something up I’ll save the history that I ran.

Proxmox has a UI for ZFS. But you don’t really need it, ZFS is kind of set and forget and setting it up is quite easy via CLI.

Crowdsec does everything fail2ban does so not much point.

You can analyze with either the CLI or log files piped into something like OpenObserve which is what I do. You don’t technically need their dashboard.

Komodo.

An SSL error is expected because you’re using localhost and not the common name that the cert is issued for. But the fact that it’s connecting and showing the error means the server is working.

Start with basic diagnostics, see if apache is running inside the container, if it is can you curl from inside the container, if that works can you curl from the docker host, if that works did docker create the firewall rule to expose the port or is the VPS overriding things in some way?

If that all looks good, is there a VPS provider firewall in place outside the OS?

Gotta start with the basics.

Android has a huge market share compared to iOS, plus it’s a lot harder to develop these types of applications for iPhone because of apples policies.

Probably worth storing the key in another place as well, like keepass on your phone or just print it out on paper and store it.

I wouldn’t be exposing any management consoles to the internet either way, too much risk with something that has docker socket access.

Komodo is the best portainer alt I’ve found, I read through the Arcane info but it doesnt seem as good. Komodos editor also works great.

My favorite is ‘fast and lightweight’ followed by ‘RAM required >500MB’ for a some kind of basic server.

If you want automatic updates over major versions most images will have the :latest tag for that.

It doesnt actually bypass the firewall.

When you tell docker to expose a port on 0.0.0.0 its just doing what you ask of it.

Its a docker compose deployment so should just work on any system with docker installed. Copy the docker compose file and env file if it has one, and run ‘docker compose up -d’ in that directory.

It can collect analytics from multiple places.