After reading this thread I’m apparently not paranoid enough.

Internet facing services are on their own firewalled vlan (dmz), behind a rev proxy, and I have crowdsec running on the proxy and router.

Anything that can get away with putting up on a vps I have (e.g. this Lemmy server). But some things have storage/compute requirements I’m not willing to shell out for.

It also breaks android auto for me.

I’m checking this out to see if it’s useful to me. I can see where being able to drop straight into a shell on a docker container would be handy. My only real gripe is that I can’t use it to connect to my free-tier oracle linux cloud VMs because they deploy OracleLinux out of the box.

I don’t begrudge you wanting to make a living from your work. It’s just frustrating.

I am going to try and live in it for a week or two and we’ll see if it sticks.

I was able to get the rclone mount on boot via a systemd unit without much trouble.

I even managed to drag it kicking and screaming into a docker volume that I mounted as an external volume to the Nextcloud AIO stack. It still refused to allow me to add it as a backup directory.

I think I’m throwing in the towel with getting Nextcloud to back it up via the built in mechanism. I’ll just schedule a separate job (cron/systemd) that runs shortly after the Nextcloud backup. It should be close enough for my purposes.

Did you try to mount your bucket on your host system via rclone?

I did. That’s where I ran into the problems.

I would mount it on the host system and add an additional volume in your docker-compose.yml

I’m embarrassed to admit I didn’t try this. I think I was too far into the weeds the other night. I’ll give this a try.

If it works, I’m thinking I’ll need to setup a systemd service to auto-mount the path on boot and set it as a dependency in docker so docker doesn’t start before it?

Those prices on the screenshot are annual, not monthly.

I’ll agree that the services are overpriced, and I know I’m in the wrong place for this sentiment, but I don’t think it’s unreasonable to have a reoccurring fee for something that costs actual money and man-hours to maintain. And I’d rather that fee be a bolt on vs baked into the price of the car (or whatever) so I can choose whether I want to pay it.

All that being said, I don’t pay for the kia online svcs because I think they’re overpriced.

I can confirm from personal experience that the key fob remote start works fine without a sub on 21, 23, and 24 Kias.

I own a Kia. I don’t enjoy the subscription anymore than the next guy but I’m calling bullshit.

The only features behind a pay wall are the ones the app provides. The ones that require an always on internet connection and server infrastructure to maintain.

None of the in-car features are limited. The remote start on my key fob, seat heaters, onboard nav, all work fine without a subscription.

This isn’t like the crap bmw was pulling with the seat heaters.

Be aware your backup is useless, if you don’t backup nextclouds database when using a bucket as primary storage ☝🏻

Understood. My hope was to mount the bucket locally (ro) and have it backed up with the container backups using the built in borg backup option.

rclone sync b2:mybucket otherprovider:otherbucket

I’d prefer to have proper incremental backups not just a warm copy of the data.

Rclone can mount and backup almost everything. It is a swiss knife and I love it.

It seems to be very capable but I cannot make it work for my purposes. I fought with rclone/aio for a few hours yesterday trying to make it work.

I was, quite easily, able to mount the B2 bucket to a local path. I used the --allow-other option to make it available to the whole system. Everything was accessible via the CLI, but the Nextcloud AIO admin refused to allow me to add that path to the backup job. I was unable to find any logs that indicated why. If I could get this working, I think, it would be ideal as the backups would be consistent.

I also tried using a couple of the serve options. The nfs option would launch but mounts would fail with protocol errors. I couldn’t get the docker plugin to sync up properly with docker. I haven’t tried the restic serve option yet. I can provide logs if requested.

Thanks for the help.

I’m not sure if there’s a correct way. What I’ve done in the past is use “ps” to find out what user the processes are running as.

Reads to me like the container it’s running as a user that doesn’t have permission to the volume path.

You can point it to any nfs file system you have exported on the file server. That’s entirely up to you.

Weird. I don’t remember my exact request but it was basically “send email on my personal domains” and they approved it.

I’m rather confused by the config you posted. The NFS config should all be down in the volumes: section the only thing you reference in the service section is the name of the volume you define and the path to mount in the container. Something like this (tho I’m guessing as to what should be what with your setup).

services:
  navidrome:
    container_name: navidrome
    image: deluan/navidrome:latest
    ports:
      - "4533:4533"
    environment:
      ND_SCANSCHEDULE: 1h
      ND_LOGLEVEL: info
    volumes:
      - /opt/navidrome/data:/data
      - music:/music
volumes:
  music:
    driver_opts:
      type: nfs
      o: "addr=XXX.XXX.XXX.XXX,nolock,soft,ro"
      device: ":/nfs/Shared Music"

What do you mean, “for personal notifications”? I have a bunch of alert notifications that route through SES back to me. Never had an issue.

I’m running checkmk for monitoring but that won’t help you with detection of unwanted logins. For security I’m running crowded.

https://rostislavjadavan.com/posts/promox-delete-cluster

I have looked high and low for how to delete a cluster and have never stumbled on this page, thanks! Almost everything I found said I had to destroy proxmox and reinstall it.

Np. I wasn’t trying to imply anything. I asked a different question, it just had overlap so I thought you might find it useful.

Certainly. But, what I’m trying to say is it’s not just email. My users are using my domain as their Google account. All Google services, oAuth, etc…, not just email. To do it right I need to get them to migrate their google services to a gmail.com account.

I need to re-ip both of my proxmox hosts and ran into a wall due to quorum. This could get me over that hump.

That being said, it was a failed experiment to put them in a cluster. I don’t use any of the cluster functionality and would love to destroy the cluster config w/o having to rebuild the proxmox hosts.