NixOS is the most boring distro I’ve ever used.

I configured everything across multiple machines and now it just works.

Oh I see – you’re asking a hypothetical.

The simple answer is that it’s a bad idea to take snapshots of running databases because at best they could be missing info and at worst they can corrupt.

The short answer: Don’t.

docker stop container

Make your snapshot

docker start container

What am I missing?

Why not?

This is one of the reasons Docker exists.

When the crowd strikes

I’m not falling for that one again. Next you’ll tell me to use DeezOS

I don’t want to have remote access to my server outside of my home for security reasons, so this is just the bare minimum

What are your security concerns?

Yup, same experience. I started out hosting everything on a single box, but have slowly moved things like HA and Pi-hole to their own machines, so they don’t all go down when that one box goes down.

deleted by creator

My solution to this has been to not forward the ports on individual services at all. I put a reverse proxy in front of them, refer to them by container name in the reverse proxy settings, and make sure they’re on the same docker network.

Oh wow! Quite a journey!

I’d consider Paperless a hall-of-famer for self-hosted software and something most people who get into self-hosting discover at some point, even if they don’t use it.

So thanks for building it, even if you’ve moved on. You gave the forkers something great to build from.

Legend!

Do you use NGX yourself?

https://docs.paperless-ngx.com/#features

I recently tried out Cockpit on top of plain old Debian and it was really nice. You can manage VMs and whatnot, but it’s quite a bit more lightweight than Proxmox IMO.

Where fish?

But rebuilding a bare metal server properly compatimentized took me a few hours only, so is that really so important?

Depends on how much you value your time.

Compare a few hours on bare metal to a few minutes with containers. Then consider that you also spend extra time on bare metal cleaning up messes. Containers don’t make a mess in the first place.

I just hate having to re-configure all my stuff whenever I set up a new box 🤷

Upvoted in Nix solidarity. One day they’ll understand.

I don’t use SwiftKey, just tested it because you shared a tool for doing it and claimed it was able to subvert Android permissions.

You probably didn’t actually disable the permission – like I said, the idea that an app could get around system-level permissions like that, in a way you could plainly observe would be headline news. It would be astounding that you somehow uncovered something that massive.