Yep, I think you’re spot on! Glad I asked, I don’t think I would’ve ever thought of that. Thanks!

Premises: a house or building, together with its land and outbuildings (properties).

Premise: an idea, theory, or theme that forms the basis for a statement or action.

Yep

You only need to pay for pro features, which I haven’t had the need for

I found it using the search in Neo Store, but you should be able to add this repo to F-Droid: https://gitjournal.io/fdroid/repo

You mention Quillpad, so I assume this is for Android. If so, I went through a similar search after dropping NextCloud. I ended up with GitJournal. The app is nice and has all the features I need. I have it backed with self-hosted Forgejo. If I need to make a note on a desk/laptop, I can clone the repo and use whatever text editor I like since it’s all just markdown. I even have vs code server set up for quick notes on the web

I’m referring to docker bridge networks. old_main is in the 10.2.1.0/24 subnet and i’m trying to move everything to a new bridge network on a subnet of 10.0.0.0/24. sorry, i’m not exactly sure what other info would be useful

That makes sense, except Google kinda does the same thing. Everything they have is technically just a “free tier” of the Google One subscription, right? I guess I’m saying that “free tier of paid product” doesn’t automatically qualify a company as trustworthy for me. Is there something else that sets Cloudflare apart?

Why does Cloudflare get a pass on the “if it’s free, you’re the product” mantra of the self-hosting community? Honest question. They seem to provide a lot for free, so…

I’m doing something similar (with a lot less data), and I’m intending on syncing locally the first time to avoid this exact scenario.

I’ve been looking around for notes apps with similar criteria with the addition of a portable format (markdown prferably) and, ideally, the ability to add images directly from the camera. I landed on GitJournal and backed it with a self-hosted Forgejo server, but this can be any git server. This has the benefit of requiring an ssh key pair for access

If you have NextCloud, you can try Deck. I moved off from NextCloud and Deck was, oddly enough, one of the harder apps to replace. I ended up with Vikunja. They have an android app in alpha but it feels pretty polished

I use Obtainium for all apps with no f-droid presence, I just forget which ones sometimes. It’s the browser extension that makes this one great. I wanted something pretty easy after losing the convenience of Authy desktop

When Authy dropped their desktop app, I picked this up for 2FA: https://2fas.com/

EDIT: oops, just realized this isn’t listed on f-droid…

When I turn off Wi-Fi, I’m not on the same network as my server, it’s my carrier network so all the internet hops are expected.

The way it’s working now is I have a domain (example.com) that is set up on cloudflare DNS. I added a tunnel in cloudflare zero trust, which generates certificates you add to your server to encrypt traffic from your server to cloudflare. I have added these to traefik to be served with my service url (service.example.com). Then, I added a route in cloudflare for service.example.com.

This works fine. But, what I’ve also done is add a local DNS entry for service.example.com so when I’m on my LAN, I access it without going out to the internet and back (seems like a waste). However, this is serving the origin server certs from cloudflare, which causes trust issues

I’m using docker for everything: traefik, cloudflared tunnel, and my services on the same hardware. The tunnel just runs, and it’s configured on cloudflare zero trust to talk directly to the container:port over the docker network.

That’s what I’m settling on. However, it’s not just about trust, some of the services I’m exposing deal with moving files and I’m mostly interested in higher speeds associated with local transfers as well as not using up my internet data cap.

You’re right, I’m using the cloudflare DNS challenge to get let’s encrypt certs. I’m definitely hitting traefik. I’m testing by turning the Wi-Fi on my phone off/on and opening the page after. I get the same cert every time but it’s not trusted when on Wi-Fi. This makes sense since it’s the origin server cert which is meant to encrypt traffic between my server and cloudflare. To add more certainty, when Wi-Fi is on, a traceroute shows only one hop to my server and shows a bunch of hops when it’s off.

Barring any Traefik tricks that allows me to accomplish what I’m after, I was thinking of going with your “third” option of just letting it use Cloudflare for everything but, I had to check with the experts first before just doing it.

I have some apps that complain or, in one case, flat out doesn’t work if the cert is invalid. I’ve been working around it (sort of) but it would be nice to have it set up “correctly” for once. If routing all traffic through Cloudflare is the answer, so be it ¯_(ツ)_/¯

If I use the Cloudflare origin server certs, the browser shows insecure and the message is “certificate not trusted” which is the same message as self-signed, if I’m not mistaken. I’m not sure what other details are relevant as I’m still new-ish to the networking portion of this home server thing. I’m happy to answer any questions if you suspect something.

I’m not using self-signed anymore, I’m getting them from Cloudflare via DNS challenge