- install opnsense
- set up geoip block where only IPs from your own country can ever initiate connection from the outside
- keep your stuff up to date
- enjoy security
Do_TheEvolution
joined 1 year ago
Strange, I never quite got why ever would i want to swtich to NPM, tried it and never liked it...
I ssh in and edit my caddyfile faster than I go to npm web interface and click through menus. I actually can just copy paste caddyfile config and have backup of it, while I am not even sure if npm has any backup solution by now, or you just suppose to backup on docker level.
And it is kinda in the way, a gui layer if you wanna do something more..
npm is nice for people who want easy web gui to configure stuff
caddy makes me feel more in control, its easier to backup too, since its all in one easy and readable config, and probably has more features as you go with your needs
There is also not that layer of which developer fucked up that you get when projects are projects of projects...
Something I encountered last week.
- wanted to test running caddy without https and without being open to the world, to turn off automatic https.
- Googled and came up with auto_https off documentation that I read.
- It did not work, http still did not work
- Googled more and landed on forum page that explained why auto_https is not working and that it needs explicitly stated
http:\\or port:80in the address. Otherwise caddy will listen by default for only https.
It was no biggie, that forum post is literally the second google result for auto_https and does good job, but you asked and I have it fresh in memory...
Are they necessary or more of a convenience thing?
Convenience.
Dunno why top answer is necessity, you absolutely can rock open multiple ports that go to different things, same as OP does now through VPN.
But convenience is a big thing... I love caddy reverse proxy for its simplicity and robustness. Here is a docker guide if you wanna try it.
From my basic selfhosted experience... I run kopia as root , my shit uses bind mounts so all I care about is in that directory.
And so far it works fine, to just down old, rename the directory, copy from nightly backup back the directory and start container.
But yeah if there is something I care about I schedule database dumps like here in bookstack or vaultwarden..
To have something more if shit would not work start.
Can you post the compose?
Also I thought that frigate is only usable through home assistant, but that only means android app I guess.
Anyway, I am actually in process of picking few cameras, likely going with tplink vigi, like C340 and see if it will play nicely.