Hope this helps:

(It’s an Asus RT-AX86U Pro - so fairly chunky in terms of spec)

I have your exact router make and model! I self host my own server with a domain on my home network and make use of the built in DDNS feature.

My domain registrar is Cloudflare so I have to use a custom script for DDNS, if you’re in the same boat I can provide the script.

I would suggest looking into Asus WRT Merlin Firmware, the custom firmware enables more functionality to your router.

Docker containers for

1. Ghost
2. Nginx Proxy Manager

When hosting a reverse proxy like Nginx, Traefik, SWAG, Pangolin, etc keep in mind you 80:80 and 443:443 ports need to be exposed to the host machine then you will forward those ports on your router. This will allow your reverse proxy to communicate with Lets Encrypt generating and verifying your SSL certificates.

First have a look at the report header Content-Security-Policy-Report-Only add things you know about, as that will allow you to log what you need to have setup. Then once you have a list of things you know you need, add them and what the logs again. adding in things as you see and verify them.

Thank you for this! I feel as if I got the idea however, failed on the execution. I added this to my routers.yml -

        contentSecurityPolicyReportOnly: "child-src; connect-src; default-src; font-src; frame-src; img-src; manifest-src; media-src; object-src; script-src; script-src-elem; script-src-attr; style-src; style-src-elem; style-src-attr; worker-src; report-to csp-report"

To my understanding the report-to directive at the end adds a endpoint called /csp-report yet in my testing it doesn’t appear to exist and just leads to 403, I’m likely doing something totally wrong but I appreciate you pointing me in the right direction!

Also dont just add things in without checking that its in your code, you dont want to add hack-me.com by mistake.

That’s fair, I’m certainly no wiz at programming and this is just self-hosted docker applications that I’ve jerry-rigged to work with one another.

That’s fair, I’ve updated my grub to reflect the changes you linked earlier, I’ll give the machine a good ol fashioned reboot once I get home.

Thanks again.

1. Do they BOTH disconnect at the same time?
2. Is this connected over USB?

Yup they disconnect at the same time, it uses USB for data transfer however, the dock does have its own power supply.

If you don’t have another way to connect these drives to your machine, then do this: https://danielbrennand.com/blog/proxmox-fix-usb-disconnect/#troubleshooting

I’ll give this a shot when I get home, I have an 2.5” SSD that is connected to a regular USB 3.0 port that isn’t shutting off like the HDD’s so I’m skeptical to think that a power saving feature is causing this.

Thank you!

Back up your important files while you still have them and get new ones ASAP; preferably some form of SSD

Unfortunately I’m going to have to until pay day for me to replace the drives, and I currently don’t have 6tb to back up to, I was thinking of getting a 10tb western digital NAS drive as it is significantly cheaper than a 10tb SSD.

Granted an SSD would be ideal if I can find one relatively ”cheap” that still has a NAND chip for caching.

Well that’s worrisome, I suppose this is where I start looking for replacements. Thank you!

I don’t use Caddy but Keycloak may be what you’re looking for.

How is the art a positive?

While true, they still collect data on the results hosting your own instance can prevent you from hitting rate-limits as often.

• SearxNG (Google Privacy frontend)

SearXNG is more than just a front end for google search, it’s an aggregator, if configured properly can collect results from Bing, Startpage, Wikipedia, DuckDuckGo, Brave.

Yes, back up your stuff regularly, don’t be like me and break your partition table with a 4 month gap between backups. Accomplishing 4 months of work in 5 hours is not fun.

While true, at least I ain’t getting the updates that bloat applications with Ai… yet

So why would you not write out the full path?

The other day my raspberry pi decided it didn’t want to boot up, I guess it didn’t like being hosted on an SD card anymore, so I backed up my compose folder and reinstalled Rasp Pi OS under a different username than my last install.

If I specified the full path on every container it would be annoying to have to redo them if I decided I want to move to another directory/drive or change my username.

People praising Arch, people hating on Ubuntu, meanwhile me on Debian satisifed with the minimalism.

As other stated it’s not a bad way of managing volumes. In my scenario I store all volumes in a /config folder.

For example on my SearXNG instance I have a volume like such:

services:
  searxng:
    …
    volumes:
      - ./config/searx:/etc/searxng:rw

This makes the files for SearXNG two folders away. I also store these in the /home/YourUser directory so docker avoids using sudoers access whenever possible.

Grandma probably doesn’t do the actually torrenting herself, chances are OP has a overseerr or jellyseerr type of setup, grandma makes the request and things just flow.

Been using Jellyfin to host my music and Finamp to play it, Lyrics are pulled from https://lrclib.net/ using a Jellyfin plugin, certain lyrics are timestamped allowing for synchronization other are just static.

ProtonVPN works fine for Debian based systems, wish I could say the same for ProtonDrive.

“Technically” my jellyfin is exposed to the internet however, I have Fail2Ban setup blocking every public IP and only whitelisting IP’s that I’ve verified.

I use GeoBlock for the services I want exposed to the internet however, I should also setup Authelia or something along those lines for further verification.

Reverse proxy is Traefik.