• 1 Post
  • 23 Comments
Joined 1 year ago
cake
Cake day: July 7th, 2023

help-circle


  • you don’t even need to think about letsencrypt

    Do you know if it’s just as friction-less to have a self signed cert up with Caddy for internal use? I was using Nginx PM recently and had the need to serve https but I can’t use letsencrypt because it’s not public-facing. Nginx PM only has letsencrypt as an option.

    I wish there was a checkbox that just deployed a self-signed cert without bothering with the details (it’s 2024 ffs, HTTPS should be 1 click away, whether that’s self-signed or not).
















  • I recently ditched Portainer entirely - it looks good, but when debugging anything it is really not helpful and often gets in the way. And if it runs on the first try I don’t need a web interface.

    My tips:

    • Run self hosted things on Linux and open their webpages on Windows if you really want or need to keep using Win.
    • Prefer docker compose “stacks” over docker directly or native installs. Personally, I just use 4 sub-commands for pretty much everything I do: up, down, pull and logs. You (probably) don’t need Portainer.
    • If after 1. making sure the docker-compose.yaml is right, 2. setting up the .env file if present, and 3. following the instructions in their README; a container stack doesn’t run after 2 or 3 attempts: copy the error message and search their GitHub issues - chances are someone else also faced that problem. If you can’t find anything similar, open a new issue.



  • I had Portainer setup, but it was clunky and the web UI added little value.

    Now I just have a local git repo with a directory for each compose stack and run docker compose commands as needed. The repo holds all yaml and config files I care to keep track. Env variables are in gitignored .env files with similar .env.example in version control. I keep sensitive info in my password manager if I have to recreate a .env from its example counterpart.

    To handle volumes, I avoid docker-managed volumes at all costs to favor cleaner bind mounts instead. This way the data for each stack is always along with the corresponding configuration files. If I care about keeping the data, it’s either version controlled (when mostly text) or backed up with kopia (when mostly binary).