I can only think of two ways if the top of my head:

• Immich runs as root and sets ownership (sounds unsafe)
• Immich is the owner of all the files, but each user has a specific group (bobs-photos) of which Immich and the user are members. Then use the setgid bit to set group ownership and make it g+rwx.

Both sound pretty brittle to me, though, and I haven’t tested this specifically.

Both MySQL and MariaDb are named after the developer’s daughters.

1. Some kind of monitoring software, like the Grafana stack. I like email and Discord notifications.
2. The Dockerfile will have a HEALTHCHECK statement, but in my experience this is pretty rare. Most of the time I set up a health check in the docker compose file or I extended the Dockerfile and add my own. You sometimes need to add a tool (like curl) to do the health check anyway.
3. It’s a feature of the container, but the app needs to support some way of signaling “health”, such as through a web API.
4. It depends on your needs. You can do all of the above. You can do so-called black box monitoring where you’re just monitoring whether your webapp is up or down. Easy. However, for a business you may want to know about problems before they happen, so you add white box monitoring for sub-components (database, services), timing, error counts, etc.

To add to that: health checks in Docker containers are mostly for self-healing purposes. Think about a system where you have a web app running in many separate containers across some number of nodes. You want to know if one container has become too slow or non-responsive so you can restart it before the rest of the containers are overwhelmed, causing more serious downtime. So, a health check allows Docker to restart the container without manual intervention. You can configure it to give up if it restarts too many times, and then you would have other systems (like a load balancer) to direct traffic away from the failed subsystems.

It’s useful to remember that containers are “cattle not pets”, so a restart or shutdown of a container is a “business as usual” event and things should continue to run in a distributed system.

True open source products are your best bet. TruNAS and Proxmox are popular options, but you can absolutely set up a vanilla Debian server with Samba and call it a NAS. Back in the old days we just called those “file servers”.

Most importantly, just keep good backups. If you have to choose between investing in a raid or a primary + backup drive, choose the latter every time. Raid will save you time to recover, but it’s not a backup.

Gotcha. I face similar issues with Synology. Their hyper backup format doesn’t seem to be standard. I’m considering setting up Borg Backup for offsite so I can restore it onto non Synology devices later.

Was this Synology by chance?

Maybe, but imo it will be a short-lived niche until people learn to use AI properly.

When I use AI for coding I try to catch its mistakes as I go along. I rarely use the agent mode and just let it loose. I’ve done that as an experiment a couple of times, with hilariously bad results each time.

People will adapt and learn when you need to babysit the AI and the problem will eventually diminish.

Just my take.

I have a DS923+ with four Seagate 8TB drives in it that I really like. It’s easy to use and offers a lot of services.

However, like others have said, I do not recommend it for new purchases. If I were to do it again I would most likely set up an old PC as a server (though I went with the Synology mainly for power use reasons).

Synology is getting increasingly customer hostile, and from what I’ve read online their Linux version is so full of bespoke patches that they have painted themselves in a corner it will be hard to get out of. So, they’re likely to fall behind on keeping up with third party software. Their software is usually pretty slick and easy to use, but they discontinue things every few cycles.

The main thing I still use of theirs is Synology Drive, which was a pretty seamless move from Google Drive. On the flipside, their stuff is proprietary, so getting off of their platform can be challenging.

For my self-hosting needs I try not to tie anything to the Synology and just use it as a plain NAS. I use my Raspberry Pi or a VM instead.

I know it’s ELI5, but this is a common misconception and will lead you astray. They do not have the same level of isolation, and they have very different purposes.

For example, containers are disposable cattle. You don’t backup containers. You backup volumes and configuration, but not containers.

Containers share the kernel with the host, so your container needs to be compatible with the host (though most dependencies are packaged with images).

For self hosting maybe the difference doesn’t matter much, but there is a difference.

See if a light weight kubernetes installation is for you. Secrets are first class citizens in k8s. You can maintain secrets in a number of different ways, but they are exposed to containers the same way. They can become files or environment variables, whether you need.

I recommend looking at k3s to run on your Pi and see if that works for you. You can add vault software on top of that later without changing your containers.

The distinction is between bare metal and virtual machine. Most cloud deployments will be hosted in a virtual machine, inside which you host your containers.

So the nested dolls go:

• bare metal (directly on hardware)
• virtual machine (inside a hypervisor)
• container (inside Docker, podman, containers, etc.)
• runtime (jvm, v8, clr, etc) (unless your code is in C, Rust, or other such language)
• your code

I have one of my domains on Cloudflare and was thinking of moving the rest of them there. What makes it harder to move name servers away from Cloudflare than other places?

Since unity is c# I think maybe you phrased that opposite of what you meant?

Anyway, I work in an enterprise environment. We use both Java and .Net, and it largely depends on which group you’re in. Neither Java nor .Net is going away anytime soon.

You really don’t get to stick with just one thing in a developer career. Learn a little of everything, especially multiple paradigms, and specialize in a few related to the business you work for.

A key skill is adaptability, learning as you go. If you make yourself too specialized, you’ll set yourself up for being laid off when your skills become obsolete. I have interviewed a few older IT people in that situation, only a few years from retirement.

I switched to self hosted Piwigo after Flickr started threatening to delete my photos a while back.

It had an extension that let me import all my photos from Flickr. Not sure if that still works after they changed hands.

It’s very easy to maintain; just click the update button in the Web UI. And it comes with a bunch of extensions.