My son is trans which makes me… transparent
Wow I am not in your league
I am currently migrating from a dedicated docker host to a proxmox host with multiple LXC containers.
old host - 23 docker containers, 128GB system drive, 4TB data drive
backup server - 1 docker container, 1TB disk
proxmox - 3 LXC containers, one of which has 3 docker containers. 500GB system drive, 4TB media drive (not LVM)
The plan is to migrate the loads on the old host to the proxmox host. I also have another 4TB drive coming with the intent of setting up a RAID with 2 of the 4TB drives.
I use Nginx Proxy Manager to reverse proxy all my services including Vaultwarden -
Setup in NPM -
Open Nginx Proxy Manager Admin Portal
Click Proxy Hosts
Click Add Proxy Host
Fill in the details
Details tab
Domain Names - vault.your.domain
Scheme - http
Forward Hostname/IP - vaultwarden (this should be the name of your vw container)
Forward Port - 80
Tick Block Common Exploits
Tick Websockets Support
Access List - Publicly Accessible
Custom locations tab
Add the following locations
location 1
location - /notifications/hub
Scheme - http
Forward Hostname/IP - vaultwarden
Forward Port - 3012
Click the cog symbol and add the following to the textbox that appears
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
location 2
location - /notifications/hub/negotiate
Scheme - http
Forward Hostname/IP - vaultwarden
Forward Port - 80
Click the cog symbol and add the following to the textbox that appears
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
location 3
location - /
Scheme - http
Forward Hostname/IP - vaultwarden
Forward Port - 80
Click the cog symbol and add the following to the textbox that appears
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
SSL tab
SSL Certificate - Request a new SSL Certificate
tick Use a DNS Challenge (or just expose port 80 if you accept the risk)
DNS Provider - Dynu (this is my dyndns provider)
Credentials File Content - replace YOUR_DYNU_AUTH_TOKEN with the API key from https://www.dynu.com/en-US/ControlPanel/APICredentials
Email Address for Let's Encrypt - your email
Tick I Agree to the Let's Encrypt Terms of Service
Click Save
Vaultwarden should now be accessible via https://vault.your.domain
I seriously suggest you give Nextcloud another go, this time under Docker. Very simple to do.
Save the following in a new folder as docker-compose.yml
version: '3'
volumes:
db:
services:
nextcloud-app:
image: nextcloud
container_name: nextcloud-app
restart: always
volumes:
- ./data:/var/www/html
environment:
- MYSQL_PASSWORD=changeme
- MYSQL_DATABASE=nextcloud
- MYSQL_USER=nextcloud
- MYSQL_HOST=nextcloud-db
ports:
- "80:80"
links:
- nextcloud-db
nextcloud-db:
image: mariadb
container_name: nextcloud-db
restart: always
command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
volumes:
- db:/var/lib/mysql
environment:
- MYSQL_ROOT_PASSWORD=changeme
- MYSQL_PASSWORD=changeme
- MYSQL_DATABASE=nextcloud
- MYSQL_USER=nextcloud
run this command in the folder -
docker-compose up -d
open http://localhost
I love posts like these just to look for more stuff to host!
My current list -
hex - main server (Intel NUC 8GB)
Nginx Proxy Manager (reverse proxy)
Dokuwiki
Nextcloud (file sync) - also used for the following
Bookmarks
Contacts
Calendar
Location tracking
Notes
Airsonic (music streaming)
Audio Bookshelf (audiobook streaming)
Calibre-Web (e-books)
FreshRSS (RSS reader)
Kavita (comics)
Batch monitoring scripts
N8N (workflow automation)
Transmission (bittorrent client)
Vaultwarden (password and 2FA sync for Bitwarden)
Glances (fancy top replacement)
Paperless-ngx (process attachments and scanned documents)
Uptime Kuma
Dozzle
charon - Raspberry PI4
Pi-hole (Ad blocking DNS server)
PiVPN (wireguard VPN server)
PiAlert (network intrusion detection)
Time Machine (backup for MacOS)
Borg Server (backup for main server)
coeus - Raspberry Pi Zero
PiHole
I use calibre to manage my collection. Calibre creates a folder per author and a sub-folder per book. I also have separate Calibre libraries for fiction, non-fiction and comics.