• 0 Posts
  • 12 Comments
Joined 1 year ago
cake
Cake day: June 10th, 2023

help-circle



  • The lemmy instance works fine so far. I had some problems migrating the nginx config file from the lemmy manual migrated to traefik, but it works with this guide here.

    I’m not really forwarding ports, but I’m rather using a more complex setup. I have two devices - my router and an external VPS hosted in a datacenter. These devices are connected via WireGuard. On the VM where all my services are installed there is traefik installed which is used as reverse proxy for the services and does TLS. The VPS has HAProxy configured to the internal VM in TCP mode, which makes the services available from outside and is important to get valid Let’s Encrypt certificates as I’m not using DNS Verification.

    I know it’s a bit hard to understand, but it works fine for me and I’m not depending on any third-providers (other than the Hoster of the VPS, which I can easily swap if needed).




  • Ah, so you added another nginx on the host by installing it from the package store of the distro and have that proxy port 80 to the docker nginx?

    If you do that then you also need to add the websocket settings I had in the first comment to the host nginx.

    What I meant what that the nginx in the docker-compose from lemmy also listens to port 80 and you just need to add

    server {
        listen 80;
        server_name my_domain.tld;
    
        location / {
            proxy_pass http://localhost:LEMMY_PORT;
            proxy_set_header Host $host;
            include proxy_params;
        }
    }
    

    to the nginx.conf of the container.

    Then you should have it accessable from port 80 without the host nginx (of course you need to stop the host nginx then).





  • It works fine for my use-case which is basically just tracking my work-time for the employer I’m working at, so I don’t really use the freelancing options like invoicing.

    Had some problems with the docker container, because they did some breaking changes, but overall it works for me.

    It also supports SAML so I can use it with Keycloak and there is an app for the iPhone, which I’m using that works nicely with it.


  • Pretty much anything I can. Host OS is mostly Debian with Docker, only the Git Server is running on Alpine. Hardware-wise everything is running on Proxmox with an FreeBSD NAS for backup and data storing

    • Logging/Monitoring Stack (Grafana, Loki, Prometheus, InfluxDB)
    • Step-CA for custom internal CA
    • Firefly III as budgeting tool
    • Kimai for work-time tracking
    • Vikunja for Project Management
    • Keycloak as OIDC server
    • Grocy for inventory management
    • Bookstack as personal Wiki
    • The lemmy instance i’m posting from
    • Mastodon
    • Nextcloud with Collabora Office
    • Bitwarden as Password Manager
    • Miniflux for RSS Feeds
    • Some websites
    • Gitea
    • Wireguard
    • Jellyfin
    • Metube
    • Mail server running docker-mailserver (only as fallback due to sending problems to Microsoft)
    • Uptime-Kuma
    • Home-Assistant