I use one of the maintained forks of watchtower.

I use it to auto update within stable versions for things that are reputable enough to not make breaking changes, so nginx, apache, wireguard, traefik, etc. In over 10 years of running Plex I don’t think I’ve experienced a breaking update in the last 5-7 years at least, so I consider it safe enough. Any other software like Immich that I’m not sure if that’s safe, I keep it behind a vpn and update manually. But for things as big as nginx especially I feel very safe letting it auto update within a major version.

Yeah good call. I keep using an actively maintained fork because I can’t be bothered to switch to another project.

As someone who has nearly all internet facing software auto update with watchtower nightly my cortisol is so low

Removed by mod

Removed by mod

deleted by creator

Removed by mod

Removed by mod

Removed by mod

I’m sorry your workplace is so lame 😞 most of the IT at my last job were furries, and half of the dev team were trans or gay. I couldn’t imagine working somewhere that rejects valid software just because of its associations. That’s kinda like shooting yourself on the foot.

Idk my last workplace was full of nerds who appreciated the pedigree of anubus’ creator. We used it to protect our production sites without even changing the branding. If I were in your place I would find it very hard to resist bringing up the amount of furries in tech.

Raidz5 doesn’t exist, I assume you mean raid5? And you wouldn’t know, URE is sometimes silent, and because without parity during a rebuild you would be recalculating the parity bit and assumig every read on the remaining drives is successful. Except the URE rate for drives hasn’t gone down to match the increasing size of drives - so for a full 1x read of a large drive, you’re statistically at risk to get at least 1 URE.

In short, there is no integrity checking when rebuilding a single redundancy array after a drive failure, so just because a rebuild succeeds, doesn’t mean nothing was lost or corrupted. With double redundancy, you will still have single redundancy during a rebuild, so you would be able to detect URE and retry reads or raise an error to the user.

Some articles may make it overblown - you won’t lose your whole array, but any files stored in the block that had the URE during rebuild would be lost. And you might not know that it happened.

You can read about it here: https://www.servnetuk.com/insights/ure-is-raid-5-dead

Raidz1 or z2? One of the reasons I went with z2 is because of the “raid5 is dead” thing, argument basically being, drives are so large that if 1 fails, you are statistically almost guaranteed to encounter a read error during the rebuild when you no longer have any redundancy, so double redundancy is a necessity nowadays.

I use haproxy just for simplicity, with the https fronted in tcp mode with a tcp request inspect delay and acls using req_ssl_sni allows switching between multiple backend based on hostname, though if you only had 1 backend server then it could just be a raw tcp proxy. I have my stuff split between 2 local boxes that are both connected to the reverse proxy using wg so this works well for me.

I use a wireguard tunnel as a reverse proxy and it does ssl passthrough with sni. Termination happens on my local box and the reverse proxy host doesn’t do any certs.

I went with rsync.net, grabbed a promo at some point and have been getting 1.6TB for $10/mo. They support a wide range of protocols (sshfs, sftp, rsync, borg, synology, guides for freenas and truenas), snapshots, idle alerts, geo redundancy for a fee. Been very happy with it so far. Had to retrieve some files once and had no issue.

I couldn’t find a common compatible format for me and 15 friends :( I also got tired of getting 20 requests to download more movies and episodes every week.

Doesn’t this need an AI disclosure in the title and post per the rules of this community?

I completed a 300 mile move yesterday, and my homelab was one of the least stressful parts thanks to my pre-emptive downsizing from a half rack to just a Synology + Intel nuc. I also pre-emptively switched from forwarded ports to a reverse proxy because I didn’t want to be thinking about what isp I would end up with. Even further, I linked the nas and nuc directly with Ethernet so that I wouldn’t need to rely on static IPs or router-assisted local hostnames, mdns, avahi, whatever because I wanted to be able to transplant my lab onto any network just in case of emergency - thankfully I haven’t had to test that out but it’s nice knowing my lab should work on any network where both boxes can reach the internet / my reverse proxy. I was thinking worst case if we ended up in some apartment complex with some crappy provided setup that had broken local discovery then it would be 1 less thing to worry about.

Honestly I like the idea of your project but the writing style of your post is very grating.