Correct. SearxNG is very much still active. Check the GitHub page or matrix/IRC.

Fuck that and fuck him. He deserves no sympathy.

Of course it’s Missouri……..

Having your ISP do your port forwarding seems alien to me as that's not the norm where I am. Since it seems like a standard thing where you are, you may run the risk of another ISP doing the same thing. Personally, if the price is right, I'd take the latency hit and get a VPS and route all inbound traffic through that via wireguard.

"They're not here for me"

Having multiple guitars, I’ll still go by what Jim Lill and SMG say: it’s mostly up to the speakers. I have a knockoff tele, Epi Wildkat and some others. They sound exactly the same with my setup using an fx chain in reaper going out to my shit Line6 amp. Personally I don’t care as much about sound as I do does it make me want to play?.

So, docker networking uses it's own internal DNS. Keep that in mind. You can create (and should) docker networks for your containers. My personal design is to have only nginx exposing port 443 and have it proxy for all the other containers inside those docker networks. I don't have to expose anything. I also find nginx proper to be much easier to deal with than using NPM or traefik or caddy.

It was me. Guess what I'll be doing today.

I use uptimekuma with notifications through home assistant. I get notifications on my phone and watch. I had notifications set up to go to a room on my matrix homeserver but recently migrated it and don’t feel like messing with the room.

I'm 100% sure that your problem is permissions. You need to make sure the permissions match. Personally, I created a group specifically for my NFS shares then when I export them they are mapped to the group. You don't have to do this, you can use your normal users, you just have to make sure the UID/GID numbers match. They can be named different as long as the numbers match up.

Why did you register two separate domains instead of using a wildcard cert from LE and just using subdomains?

Another solution I don't see mentioned (yet) is have both ends connect to a VPS running your WG endpoint. Then both sides only have to have egress ability, nothing coming in, no CGNAT to worry about.

Yes. You can enable password requirements to install them. iOS at least, don’t know about Android.

I haven’t seen anyone mention Apache Guacamole. I use it pretty much every day and it works great for me. Multiple hosts and switching between.

Different use cases.

How exactly is your Matrix server running? Behind an nginx reverse proxy or are you using the cloudflare tunnel directly to it? Personally, I have mine behind a reverse proxy and just point the tunnel at my proxy.

This is what I use as well and it’s pretty painless after setup.

FWIW, here's my compose file. I 100% use https for everything internal. With LetsEncrypt and Pihole, why wouldn't you? It's dead-simple.

networks:
  backend:
    external: True

services:
  vaultwarden:
    container_name: vw-svr-00
    image: vaultwarden/server
    environment:
      - TZ=My/Timezone
      - DOMAIN=https://my.internal.domain/
#    ports:
#      - "82:80"
    volumes:
      - ./vw_data:/data
    networks:
      - backend
    restart: always
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vaultwarden.rule=Host(`my.internal.domain`)”
      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden.tls=true"
      - "traefik.http.services.vaultwarden.loadbalancer.server.port=80"

edit: I also run my instance on a subdomain vs a path. So my instances is actually at vw.internal.domain.

But what of you’re actually talking about a bundle of sticks…..?

Why not just run your own WireGuard instance? I have a pivpn vm for it and it works great. You could also just put jellyfin behind a TLS terminating reverse proxy.