UncommonBagOfLoot

joined 1 year ago
[–] [email protected] 10 points 3 months ago* (last edited 3 months ago) (1 children)

I prefer the MYOWN-16080 standard of yy/dm/md/y/y. Also the year units are randomly swapped for encryption

[–] [email protected] 3 points 4 months ago (2 children)

To use Docker secrets so that the secrets are encrypted on the host. Using Docker Swarm was the path of least resistance to set up my system monitoring stack.

Docker Compose can use secrets without Swarm, but my understanding is that the those are in plaintext on the host.

21
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]
 

Hi! I'm starting out with self-hosting. I was setting up Grafana for system monitoring of my mini-PC. However, I ran into issue of keeping credentials secure in my Docker Compose file. I ended up using Docker Swarm since it was the path of least resistance. I've managed to set up Grafana/Prometheus/Node stack and it's working well.

However, before continuing with Docker Swarm, I want to check if this is a good idea or will I potentially dig myself into a corner? Some of the options I've found while searching:

  • Continue with Docker Swarm and look into automation of stack/swarm in future

    • Ansible playbook has plugins for Docker Swarm.
  • Self-hosted vault: I want to avoid hosting my own secret/password manager at the moment.

  • Kubernetes (k8s / k3s) - I don't wanna 😭

    • More seriously, I'm actually learning this for work but don't see the point of implementing it at home. The extra overhead doesn't seem worth it for a single node cluster.
  • ~~Live dangerously - Store crdentials in plaintext. Also use admin as password for everything~~

Edit: Most of the services I'm planning on hosting will likely be a single replica service.

[–] [email protected] 1 points 4 months ago (1 children)

I haven't tried it myself but Ubuntu desktop 24 has remote desktop built in. You could try it out on a VM?

[–] [email protected] 10 points 4 months ago (1 children)

then others will

Unfortunately, I don't think the others want to compete fair either. It's a big race to shove garbage to consumers.

[–] [email protected] 2 points 4 months ago* (last edited 4 months ago)

Reminded me of this bit from Barge Ballad

Oh you've got to remember

Way up atop the mast

Knowing all the river routes

That you never learn from the charts

Well I do remember

[–] [email protected] 14 points 4 months ago (1 children)

By emailing your input? Kinda like chess by post.

Or text based adventures