If they require root at start, it’s more than likely they need to access devices or sockets on the host on startup. If it’s then transitioning to another uid/gid for the actual runtime in the container - which looks to be happening - its not quite rootLESS because it obviously requires root.

I’m unfamiliar with the linuxserver images, so don’t understand the need for root here.

1. No, you can’t “remove” your local networking interfaces from a container and expect it to use networking, anymore than you can remove the engine from a car, and expect it to drive. Set the default route of that container to some VPN tunnel interface, and you should be fine.
2. I’m not seeing a link to any config
3. 1000:1000 is usually the default user that is created for you when you setup a Linux system, so yes it’s reasonable for them to run as your user. It is NOT reasonable to run them as root, which is 0:0. Don’t do that.

$24/mo for 6 users and 3TB storage. All the other stuff as well.

Pricing here: https://proton.me/family

Need more details about how you’re running this test.

Proton is $15/mo for 2 users and gets you mail, 2TB drive, VPN, and Pass. Pretty worth it I’d say.

I call BS.

You can get a WiFi or LTE trail cam that essentially to works the same. If you get LTE though, you’ll almost certainly need a VPN setup on your network as well to work around CGNAT issues.

I get that you’re aiming this at a user base of new folks and all, but I’m super confused to see Nix on there.

This is kind of…Nix’s entire identity, no?

One could also make the argument that this supercedes bootstrap tools that each distro has. Kickstart for example.

I would maybe focus on making helper scripts that do specific things for groups of users, like installing all the steam-* packages for Steam installs and not just steam itself since this is pretty opinionated on how you’re choosing to install things re: native package manager vs Flatpak and such.

Wuh oh

Just change the port Headscale is running on.

You also don’t want a reverse proxy out in front of Headscale. It doesn’t serve a purpose, and does nothing but introduce added complexity and performance degradation.

Just make an A record in your DNS that points to ‘vpn.whatever.com’ if you just want to treat it as a named host.

They have Open Source versions of their stack. Just run it yourself at no cost.

Am I missing something?

Also, use any other similar service which all have open source counterparts: Head scale/Tailscale, or ZeroTier.

deleted by creator

For starters: Rails, PHP, and passthrough routing stacks like message handlers and anything that expects socket handling. It’s just not built for that, OR session management for such things if whatever it’s talking to isn’t doing so.

It seems like you think I’m talking smack about HAProxy, but you don’t understand it’s real origin or strengths and assume it can do anything.

It can’t. Neither can any of the other services I mentioned.

Chill out, kid.

HAProxy is not meant for complex routing or handling of endpoints. It’s a simple service for Load Balancing or proxying alone. All the others have better features otherwise.

I’ll be honest with you here, Nginx kind of ate httpd’s lunch 15 years ago, and with good reason.

It’s not that httpd is “bad”, or not useful, or anything like that. It’s that it’s not as efficient and fast.

The Apache DID try to address this awhile back, but it was too late. All the better features of nginx just kinda did httpd in IMO.

Apache is fine, it’s easy to learn, there’s a ton of docs around for it, but a massively diminished userbase, meaning less up to date information for new users to find in forums in the like.

It’s called a Reverse Proxy. The most popular options are going to be Nginx, Caddy, Traefik, Apache (kinda dated, but easy to manage), or HAProxy if you’re just doing containers.

First: there is no cheap way to back this amount of data up. AWS Glacier would be about $200/mo, PLUS bandwidth transfer charges, which would be something like $500. R2 would be about $750/mo, no transfer charges. So assume that most companies with some sort of whacky, competing product would be billed by either of these companies with you as a consumer, and you can figure out how this is the baseline of what you’ll be getting charged from them.

50TB of what? If it’s just readily available stuff you can download again, skip backing that up. Only keep personal effects, and see how much you can reduce this number by.

I want to say Sonarr has a regex renaming feature, but I may just be making that up as I’m not looking at my instance right now. Doing whatever renaming based on a pattern would be preferable during the download phase in order to keep the metadata of each service clean.

Failing that, if you have a predictable list of release group strings you want removed from filenames, a one liner with sed or similar would take care of this. You’d then break the known locations of these files by any service tracking them of course, but they will eventually be reindexed.

Seems kind of pricey for that specific unit, but it should work well for just hosting simple services.

It’s a dumbass AI-powered recommendation engine with an awful GUI. That’s about it.

As far as it being malicious, that’s really up to you.