Selfhosted

60451 readers

980 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

132

Podman Quadlets are so cool (lemmy.world)

submitted 11 months ago by Botzo@lemmy.world to c/selfhosted@lemmy.world

28 comments fedilink hide all child comments

I don't really have anyone else to shout at about this, but it's an amazing way to host services in rootless containers entirely in user space using systemd (systemctl --user).

https://docs.podman.io/en/latest/markdown/podman-systemd.unit.5.html

you are viewing a single comment's thread
view the rest of the comments

[–] Overspark@feddit.nl 6 points 11 months ago (1 children)

If you want to use caddy as proxy for other containers running as quadlets have a look at this repo: https://github.com/eriksjolund/podman-caddy-socket-activation

It certainly demystified some network shenanigans for me.

[–] Nico_198X@europe.pub 3 points 11 months ago (2 children)

Just want to chime in here to say I use containerized caddy as a reverse proxy with quadlets and did nothing special.

[–] Overspark@feddit.nl 3 points 11 months ago (1 children)

Absolutely possible if you keep the network setup simple. However, I run different sets of containers as different users, some of which also use services from the host itself (such as a PostgreSQL instance), and things quickly become more complex in these situations. The examples on the github helped me a lot to realise everything I wanted.

[–] Nico_198X@europe.pub 1 points 11 months ago

Gotcha, makes sense. Yeah my setup is very straightforward

[–] xinayder@infosec.pub 1 points 11 months ago

If you have caddy as a reverse proxy inside podman user namespace separated networks, they don't take the upstream client IP address and instead you get local IP addresses assigned to logs. Socket activation is kinda required if you want to get the client's real IP address in your logs.