Ssh-ca is amazing, built my own with small step ca

Maybe also talk to nextcloud and see if the vjournel could be improved?

You can only order more kit, if you share it out. With every member of this community!

My god man, I need to add that site to my list. I don’t need it as I’ve been homelabing for many years, also support a SaaS app to keep me sharp.

But that site should be everywhere

If your looking for a great DNS provider, OVH is rock solid. They also register domains, I have all my domains and zones with them.

Also a dedi and a VPS, also they have an API for DNS updates that can be used to get certificates for internal domains

You could go HTTP only if your happy that anything on the network could see your traffic, I don’t trust anything on my networks so HTTPS everything.

Depending on if you have a proxy in front of vaultwarden will depend on what you need setup, I have nginx and traefik in front of my instance.

If you’re looking for an IDE that will just allow you to code, have a look at pulsar. The atom fork that works

Yes and no, there have been issues with the android app for a long time. Some of it was Google and some the way it would detect files, it just happens that I posted the GitHub issue.

that sounds like its missing the MQTT auto discovery topics, you could write a shell script to add that. or there might be a HACS thing to do it

your in luck, as I couldnt find the issue when I posted.

But there is an update to this 👉 https://github.com/nextcloud/android/issues/15822

Nice landing page, but your top image doesnt load for me

Error 1033 Ray ID: 9aab2fffed8a293c • 2025-12-08 09:20:33 UTC
Cloudflare Tunnel error

sure, you can see below that port 53 is only on a secondary IP I have on my docker host.

---
services:
  pihole01:
    image: pihole/pihole:latest
    container_name: pihole01
    ports:
      - "8180:80/tcp"
      - "9443:443/tcp"
      - "192.168.1.156:53:53/tcp" # this will only bind to that IP
      - "192.168.1.156:53:53/udp" # this will only bind to that IP
      - "192.168.1.156:67:67/udp" # this will only bind to that IP
    environment:
      TZ: 'Europe/London'
      FTLCONF_webserver_api_password: 'mysecurepassword'
      FTLCONF_dns_listeningMode: 'all'
    dns:
      - '127.0.0.1'
      - '192.168.1.1'
    restart: unless-stopped
    labels:
        - "traefik.http.routers.pihole_primary.rule=Host(`dns01.example.com`)"
        - "traefik.http.routers.pihole_primary.service=pihole_primary"
        - "traefik.http.services.pihole_primary.loadbalancer.server.port=80"

Docker by default will bind exposed ports to all IPs, but you can override this by setting an IP on the port exposed so thet a local only server is only accessable on 127.0.0.1

I do this with things that should go down my VPN only

https://docs.docker.com/reference/compose-file/services/#ports

This is a know issue that has a very long issue on github, it started for me when Google changed the rules on full file access. But the latest version of the app has been rock solid.

I ended up downloading all my photos to my laptop and doing a sync from there

Yes that, don’t run a full desktop. Run the raspian light image.

My homelab was once 10 raspberry pis all networked up as a big mess.

You need some automations to run if any of the exterior sensors change state, if they do save snapshots of exterior cameras and send you an alert. Once you get the alert you can then call the police if you think you need to, or in most cases just see that its the postie.

I have an automation run when both me and my wife are away that will turn off all lights and turn on 2 automations, the 2 automations are if motion on the drive send me a photo and if the exterior door sensors change state send an alert

It ok, but you will need an external signaling server to make it work over NAT. Also it’s only good for a few in video chat as the load peer to peer.

I would echo that, I’ve been a generalist computer whatnot for over 10 years. I have had to learn to network, virtual network with VMware. Manage Linux servers, then virtual servers. Switch from VMware to aws and understand basic terraform, with ansible learning as well.

Where I work we are on ansible repo 3 I think, as we have matured in how we use it and what works and what doesn’t.

When homelabing, you get to be all the things a big company would have job roles for.

I use nextcloud, the builtin photos app is pants. But memories is amzing

oh, I do need to look at the docker install. I have only every run it from a server with php on it, Im not going to be much help I dont think.