I eat words

first you should check logs of cloudflare tunnel - most likely it cannot access your docker network. if you are using cloudflare container - it should use same network as a Immich instance.

in short: find the tunnel log and see what is happening there.

Kinda like it, but there are some ux things I don’t like. i.e. - tags are not in the search

usually i add more than 1 ip and also vultr firewall can be managed to change ip. tailscale can be used as well. there are options!

if you configure ssh access only from your home ip - then fail2ban is not needed.

sorry, this is kinda like a firewall, but protecting websites, so many vulnerabilities are filtered out. it does not protect you 100% percent (nothing does). it might be hard to setup, in that case there is an option to use waf as a service, i.e. - cloudflare has such offering, maybe there are others as well. i have looked into vultr - they seem to offer only a “usual” type of firewall, not http/application based.

Get some WAF for the public facing app, maybe at least https://github.com/nbs-system/naxsi .

lemmy ;)

this is very simple solution i have used to clip entries in: https://github.com/blinkinglight/go-journal2

probably could fit into fly.io free tier. also as others have mentioned - oracle oci provides a nice free vm, which can be shut off if usage of resources is low, but you can workaround it by increasing a volume a bit more than free tier allows and pay something like a 1-2$ for it monthly.

Ages ago there was such a tool - Webalizer and everybody was using it :) not anymore…

using mostly operator from percona for kubernetes, sometimes just a simple deployment. Running postgresql for Lemmy from docker-compose as a container.

I use https://www.talkwalker.com/alerts to setup notifications via RSS on keywords that are interesting to me.

https://group.lt

hi,

i am using this

root@instance-20211112-2005:/opt/lemmy/lemmy/docker# cat Dockerfile.arm64
FROM rust:1.70.0 as builder
WORKDIR /app

COPY . .

# This can be set to release using --build-arg
ARG RUST_RELEASE_MODE="debug"

COPY . .

# Build the project

# Debug mode build
RUN --mount=type=cache,target=/app/target \
    if [ "$RUST_RELEASE_MODE" = "debug" ] ; then \
      echo "pub const VERSION: &str = \"$(git describe --tag)\";" > "crates/utils/src/version.rs" \
      && cargo build \
      && cp ./target/$RUST_RELEASE_MODE/lemmy_server /app/lemmy_server; \
    fi

# Release mode build
RUN \
    if [ "$RUST_RELEASE_MODE" = "release" ] ; then \
      echo "pub const VERSION: &str = \"$(git describe --tag)\";" > "crates/utils/src/version.rs" \
      && cargo build --release \
      && cp ./target/$RUST_RELEASE_MODE/lemmy_server /app/lemmy_server; \
    fi

FROM debian:bullseye-slim
RUN apt-get update && apt-get install -y libpq5 ca-certificates && rm -rf /var/lib/apt/lists/*

COPY --from=builder /app/lemmy_server /app/lemmy

CMD ["/app/lemmy"]

Also Lemmy developers are working on cross build - so it should be available in the future I hope :)

how does the ip start? 192.x or 10.x maybe?

any errors you could show us?

more than 150GB in few years and growing. to at least reduce some size - there is a need of downtime, so that always goes well :D

I am running one as well, also have some bridges between protocols, Discord bridge being among them.

To maintain it is not very hard, appart one thing - database is blowing up constantly and it is a battle to keep it contained.

Afaik Digital Ocean blocks smtp port.

What you can do is to get some mail relay service, such as mailgun or any other and configure postfix to use it as a relay host. It can be done running postfix container, but probably Lemmy could be configured to send email via relay without using postfix

in addition to all other good comments - if you will ever decide to move out service to another server or something like that - moving subdomains will be much easier.