Almost 10 years ago I purchased a Synology NAS for local storage and backups. I was really happy with the ease of use and their support is top notch. I got it set up and didn’t think much about it. Fast forward and a deal on a used server comes around and all the sudden I have a lot to learn. Proxmox, TrueNas, Nginx Proxy Manager… a whole new world I had somehow never even thought about. The concept of virtual machines blew my mind. Spin up a machine, mess it up, tear it down, repeat. Kids wanted to host a Minecraft server. No problem, pterodactyl. But wait, pterodactyl wants to be installed in a machine that doesn’t have any other software installed. No problem, I got one of those! This is magic and I’m loving it. I mostly lurk around here but thanks to everyone who posts because this place is a great source of knowledge and sarcasm and I appreciate both!

  • sl_hr@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    11 months ago

    Just a side question, what are pros of having docker around on various hosts compared with having one dedicated docker host?

    • Oh-This-Guy-Pucks@alien.topB
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 months ago

      In hindsight maybe not a ton, but my thinking going into it was that if one container were to get compromised, the attacker would find less other stuff on each host. So the most logical way I could see to segregate my services was by purpose (media, productivity, bitcoin etc)

    • Royal_Olive9948@alien.topOPB
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 months ago

      As I said, I’m kind of a mess. I added containers while adding devices so segregating wasn’t necessarily my intention. That said, I will most likely keep DNS and DHCP on a single dedicated device. That, for some reason, makes sense to me. The rest I may move together except for the vpn services. I will run the 2 on different devices in case one service gets blocked by the external network I’m trying to connect from. I already ran into this once where WireGuard got blocked but OpenVPN did not.

    • hexathos@alien.topB
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 months ago

      I’ve sentry, drone, gitea, grafana for loggingmetrics, on one lxc… so i can migrate and backup my dev stuff whenever i want, without thinking about it… without forgetting something… and without blocking other stuff