I’ve got mine on a subdomain through a Cloudflare tunnel that points to my local nginx proxy manager (with wildcard SSL certs) then to immich. You can do access control through Cloudflare as well. Quite low risk in my opinion as long as you protect it properly.

Looks like that one isn’t maintained. That page links to this one instead.

It works great with usenet, detects albums you have and looks for those you don’t, with a decent UI for managing.

Doesn’t Lidarr do a similar thing? Not sure if it operates the same if you don’t have the arr part of it going.

Sad to see the news about tteck. His scripts really helped me get off the ground on my own self hosting journey.

This is quite important with Immich. They’re good at documenting their breaking changes, just gotta make sure you check the changelog before updating. Also best to avoid auto updating with Watchtower or similar to avoid surprises.

I’m not sure if they’re available with UK plugs, but I’ve got a pack of Thirdreality Zigbee plugs that monitor energy use and have a button on them to toggle power.

I’ve got them connected to Home Assistant. Two do a bit of climate control in a coldroom, the others are for occupancy lighting.

The asterism gives me big Splinter Cell vibes and I’m definitely OK with that.

Aka a bribe.

Unfortunately there isn’t really an all-in-one guide. TechnoTim has info on the Pi-hole config side and wildcard certificates, but I think he uses it with traefik.

NPM is pretty straightforward. If you find a site isn’t working, try turning on Web Socket support.

I’d say just search for guides on each part individually:

1. Get all the services installed and up and running
2. Get SSL certificates from Cloudflare for your domain.
3. Set up NPM for the services you want to reverse proxy with your Cloudflare SSL certs (they wont work until the next step is done)
4. Set up pi-hole to be your local DNS (there’s also adblock lists to add) and configure it to send all service(.lan).mydomain.com to the ip of NPM.
5. Set up the Cloudflare tunnel.

I can try to help if you run into any issues.

I’m definitely not a network pro, but it sounds like you’re looking to do something similar to what I have.

I’ve got nginx proxy manager as my reverse proxy with pi-hole for local DNS. All traffic goes through the pi-hole and anything going to mydomain.com has DNS entries pointing to nginx. I’ve set nginx up so service.lan.mydomain.com is for anything local and just service.mydomain.com for anything external with wildcard SSL certs for both (*.domain doesn’t seem to cover *.lan.domain so add certs for both - probably because it’s a sub-subdomain).

The Cloudflare tunnel can then just get directed to service.mydomain.com instead of the IP of the service.

Sorry, four of the power to ethernet plugs. You put one near your router to essentially supply internet to your house’s electrical circuits, then distribute the others where you need them, such as office, living room if you want to connect a TV or console, etc.

I had a set of four for getting ethernet around the few places I rented. There was maybe the odd quality decrease when there was a lot of electrical load, but they worked great otherwise.

Oh man, I remember a Philips mp3 player I had for the longest time as a kid. You could hear the little clicks of the hard drive. Lost it on a hike, unfortunately.

And also that many contracts to improve on IT are performed by the lowest bidder.

I recently went this route after dabbling with other options. I had a wireguard VPN through my Unifi router, with rules to limit access to only the resources I wanted to share, but it can be a struggle for non savvy users, and even more so if they want to use Jellyfin on their TV. Tried Twingate too and would recommend if it fits your usecase, but Cloudflare Tunnels were more applicable to me.

This is mostly my reasoning too. I’ve got a bit more juice than a NUC, but I prefer the way resources are managed with an LXC for the certain apps that I run. I still have VMs for other things, like HAOS and a BlueIris NVR. It’s only a local homelab with no external users so avoiding additional complexity is often in my best interest.

Why would one prefer a VM over an LXC for Docker?

I might have found the issue, see updates above. I have a separate Docker LXC that was behaving normally too, so was good to cross-check with that.

Docker is installed on a Debian container with Proxmox as the hypervisor. I believe as far as Docker knows, it’s just running on normal Debian. The Debian LXC has its own local ip.

I’ll take a look at those resources though, thanks.