mastouille.fr est l'un des nombreux serveurs Mastodon indépendants que vous pouvez utiliser pour participer au fédiverse.
Mastouille est une instance Mastodon durable, ouverte, et hébergée en France.

Administré par :

Statistiques du serveur :

661
comptes actifs

#dockercompose

0 message0 participant0 message aujourd’hui

I'm curious to hear what others are #SelfHosting! Here's my current setup:

Hardware & OS

Infrastructure & Networking

Security & Monitoring

Authentication & Identity Management

  • Authelia (Docker): Just set this up for two-factor authentication and single sign-on. Seems to be working well so far!
  • LLDAP (Docker): Lightweight LDAP server for managing authentication. Also seems to be working pretty well!
    #AuthenticationTools #IdentityManagement

Productivity & Personal Tools

Notifications & Development Workflow

  • Notifications via: #Ntfy (Docker) and Zoho's ZeptoMail (#Zoho)
  • Development Environment: Mostly using VSCode connected to my server via Remote-SSH extension. #VSCodeRemote

Accessibility Focus ♿🖥️

Accessibility heavily influences my choices—I use a screen reader full-time (#ScreenReader), so I prioritize services usable without sight (#InclusiveDesign#DigitalAccessibility). Always open to discussing accessibility experiences or recommendations!

I've also experimented with:

  • Ollama (#Ollama): Not enough RAM on my Pi.
  • Habit trackers like Beaver Habit Tracker (#HabitTracking): Accessibility issues made it unusable for me.

I don't really have a media collection, so no Plex or Jellyfin here (#MediaServer)—but I'm always open to suggestions! I've gotten a bit addicted to exploring new self-hosted services! 😄

What's your setup like? Any cool services you'd recommend I try?

#SelfHosted #LinuxSelfHost #OpenSource #TechCommunity #FOSS #TechDIY

@selfhost @selfhosted @selfhosting

A répondu dans un fil de discussion

@Liaely Don't overthink the hardware $$$. The "Servethehome" site has a bunch of articles under #ProjectTinyMiniMicro about repurposing super cheap corporate surplus desktop PC's as servers.

$$-wise, one of the best investments would really just be making sure you're using NVMe storage.

Tech-wise, get comfortable with #Docker and #DockerCompose.

Also get comfortable with a reverse proxy that you're going to get a lot of use out of. #Traefik and #nginx are really good ones that many tend to gravitate to.

#GoToSocial might be the easiest one to deploy. #Mastodon and #Pixelfed might be some of the hardest. #lemmy & #peerTube are somewhere in between in difficulty to set up.

I have some (non-enshittified / non-monetized) how-to's for deploying some #selfHosted services on Docker if it helps. magnus919.com blog.

But really just get very comfortable with Docker and your reverse proxy. If you do both of those things, the rest becomes a lot easier. Traefik has more of a learning curve maybe than nginx but scales up really nicely, so once you've got it figured out it is ridiculously easy to add more services to it and get https "for free".

As the next step in my quest to make it easier to poison AI crawlers, I present you: OCIocaine: a project where #DockerCompose meets #Caddy and #Iocaine, to poison AI crawlers for all your sites, automatically.

The idea here is to provide a docker compose file that starts up Caddy and Iocaine, configured so that Caddy will reverse proxy for any and all services on the same docker network, as long as they have a few labels that tell it to do so. In addition, a Caddyfile snippet will be available for all of these, which takes care of routing bad visitors to Iocaine.

And if that's not enough, the whole thing comes preconfigured with a wordlist (a list of English words), and traning data (the complete works of Shakespeare), and a list of known AI crawlers (courtesy of ai.robots.txt).

All you have to do is copy the sample configuration, create a network, start it up, and deploy labeled containers into the same network, and OCIocaine takes care of the rest.

MadHouse Git RepositoriesociocaineDocker Compose meets Caddy and Iocaine to poison AI for all your sites, automatically.

Comment passer correctement des secrets à docker-compose.
Ca n'est généralement pas un problème dans les environments K8s, où docker-compose n'est utilisé que sur le poste des développeurs, mais ça peut aider dans d'autres environnements ... phase.dev/blog/docker-compose- #dockercompose #secret #configuration #programming #devops

phaseManaging Secrets in Docker Compose — A Developer's Guide | Phase BlogA practical guide to securely managing secrets in Docker Compose for production deployments
Suite du fil

For this who want details, here's how it looks in docker-compose.yml:


  mail:
    image: bytemark/smtp:latest # https://hub.docker.com/r/bytemark/smtp/tags
    restart: always
    environment:
      - "MAILNAME=mail.pompat.us"
      - "RELAY_NETS=172.42.0.0/16"
    networks:
      - gotosocial
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

Appjail experience tour #3 ;)

I installed appjail-director and it is similar to Docker-compose but #Freebsd style.

Easy and once you set the tag correctly to the latest installed debootstrap environment (14.1 in my case) you are ready to go:

Managing our development projects is very easy nowadays, there are so many services to choose from, some with less or more features, but there is an open source project, self-hosted, with so many features that can be installed in a few minutes and the best part is that we can install it on FreeBSD. The project is called Gitea, which is a software for hosting our projects using Git. It has other collaborative features such as bug tracking, code review, continuous integration, kanban boards, tickets and wikis.

In this tutorial we will install Gitea and PostgreSQL on FreeBSD using AppJail Director.

#docker #dockercompose #freebsd #jail #appjai

dtxdf.github.io/post/how-to-in

A répondu dans un fil de discussion

In the process of trying to identify the cause of the problem, I also learned just what a pain it is to get strace working in #DockerCompose.

- Just add the SYS_PTRACE capability, right?
- Or maybe also set the seccomp:unconfined security_option?
- Or run as privileged?
- And try every combination of these and half a dozen other config options?

Nope 🤡 Still have not gotten strace to attach, but I'll keep working at this one, because it seems a useful tool to have available.

Fun times 😆

Finally got #dockerCompose working with #IPv6 🎉

- set „net.ipv6.conf.eth0.accept_ra=2“
- for example in /etc/sysctl.d/99-custom.conf

Then follow the guide docs.docker.com/config/daemon/
which means
- change /etc/docker/daemon.json

{
"ipv6": true,
"fixed-cidr-v6": "2001:db8:1::/64",
"experimental": true,
"ip6tables": true
}

- add network to your docker-compose.yml

networks:
ip6net:
enable_ipv6: true
ipam:
config:
- subnet: 2001:0DB8::/112

Docker Documentation · "Enable IPv6 support""How to enable IPv6 support in the Docker daemon"

Adding integration tests support to our #dotnet solution was the single best powerful and recent #devux move we made IMO.

It gives so much power to iterating code without having the need to start up a bazillion services and postman requests.

It is such an invaluable part of modern backend development that I can hardly imagine working anything professionally without them.

#TestServer with #dockercompose does a decent job at this.