• 0 Posts
  • 17 Comments
Joined 6M ago
cake
Cake day: Jun 12, 2023

help-circle
rss

Like other commenter said, regardless of podman or docker you will need to handle port forwarding, and any firewall changes.

Port forwarding through docker or podman is pretty similar, if not identical.

I have heard good things about podman but I personally had some strange issues when moving from docker to podman, specifically transferring docker networks to the podman equivalent.



On my phone so I haven’t got the access to give you a good example.

You see in your compose file in your original post you have ‘8080:8080’ under ports?

You should be able to add another line, the left hand side of the colon exposing a different port like so

…
ports: 
    - ‘8080:8080’
    - ‘9090:9090’ 
…

then one service you can access on port 8080 and the other you access on 9090

then under each service you want to expose you add the other port mappings

qtorrent:
    ports: 
        - 8080:8080

sabnzb:
    ports: 
        - 9090:8080

edit - so you should end up with the vpn container exposing 8080 which points to the service exposing 8080 which maps to application listening on 8080

and the same for 9090 -> 9090 -> 8080


In the VPN service you just expose the port you want and map it to the listener port on the service

vpn: ports: - 5000:8080 - 6000:8080

where you have

servicea listening on 8080 and serviceB on 8080 but exposed on 5000 and 6000 in the VPN service

for example


You can also map different ports to the container. For sake of argument lets say qtorrent had a fixed port you cannot change, that’s just what the application listens to. You can then map a different container port to that application port.

tldr, OP, you can’t have two containers in docker on the same container port


How cheap are you seeing this hardware? In the UK at least I could get an 8 port managed switch for £25 (on sale, full price £35)

https://www.amazon.co.uk/TP-Link-Snooping-Monitoring-Interface-TL-SG608E/dp/B0BVRK6L2V

A PCIE 2x gigabit network card runs at £30 each, to match ports itd cost £120

https://www.amazon.co.uk/Binardat-Gigabit-Network-Controller-Ethernet/dp/B0C4H4WNL9


The joy of lemmy is you can move instances and have different admins, if thats how you feel. You can even host one yourself



made things slow

That’s probably referring to how file systems are handled. Going from WSL to windows file system is slower than using the “proper” mount point

Unrestricted

yes


Something like this?

https://docs.linuxserver.io/general/swag

and add authentication to private services



Install an OS on the card to boot from? Its the same process as making a bootable live USB stick.

The performance will be poor in comparison to an SSD and will reduce the longevity of the card due to many r/w operations.


Some random suggestions - it really depends on your deployment strategy and available infrastructure

  • you can set secrets in portainer if you’re using docker swarm

https://docs.portainer.io/user/docker/secrets

  • you can provide secrets to docker (unsure about portainer) on the command line when building

https://docs.docker.com/engine/reference/commandline/buildx_build/#secret

  • Ive not used github actions but azure devops supports secret variables in libraries which can then be deployed via a pipeline without revealing any secrets, this appears similar on gh

https://docs.github.com/en/actions/security-guides/encrypted-secrets

  • azure key vault and similar can store secrets which code then accesses, although you still then need to authenticate with the vault



You could potentially work around by stating specific places up front? As in

“Create a travel list of countries from europe, north america, south america?”


Sounds like you struggle with nuance.

Tankies are a very specific subset of “the left”.

They support stalinist policies specifically.

Thats very narrow in comparison to a vague “the left”

ed. downvote me, idgaf. But maybe reply, discuss your position