I use nextcloud to sync our photos, with the memory's add-on and mobile app you can even have collections.

I use swarm in my home lab, I don't have any docker things at work so Kubernetes is way more then I want to manage.

All my stacks are in a git repo, I have an ansible playbook to update them if needed. I also have most things tracked on new releases (https://newreleases.io/) so I know when something needs an update, then I can either update the git repo by hand or use ansible.

Also have a look at docker contexts, you can manage your swarm from a remote location.

OMG, thats a lot of things to connect to. installing Symfonium now to have a look

So I need to make a VPS setup script to install bind for DNS and wireguard or openvpn and push it to gitlab/GitHub?

It is very simple, I run it from docker and it can plug into all sorts of places, I have nginx config that I could share if it helps.

This is the tool https://oauth2-proxy.github.io/oauth2-proxy/

maybe a look at this site will help you -> https://osm-apps.zottelig.ch/

Nextcloud deck is the Trello like thing

I have also looked at weken and taiga

https://Taiga.io https://wekan.github.io/

Depending on the login flow, I have a lot of stuff behind an oauth proxy. So that you have to have a working 2fa account to see the non 2fa system behind.

That would fail our current process of approving where we can store documents, just as well I have a Mac for work

Electric shock to you? Get an electrician to check it and sign it off?

I have my portainer behind an oath proxy, using keycloak as the Auth provider

I would have a cron that runs a script to pull the list and update IPset, this might not work.

make a file on your docker server with the below in it, set the file to execute chmod +x file.sh

#!/bin/sh
ipset -q flush ipsum
ipset -q create ipsum hash:ip
for ip in $(curl --compressed https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -v -E "\s[1-2]$" | cut -f 1); do ipset add ipsum $ip; done
iptables -D INPUT -m set --match-set ipsum src -j DROP 2>/dev/null
iptables -I INPUT -m set --match-set ipsum src -j DROP

Then add a cron file in /etc/cron.d that runs the script every 24 hours

10 3 * * * root /root/file.sh

Some thing like this

iptables -I DOCKER-USER -m set --match-set ipsum src -j DROP

Should do what you need

I use pihole as my home DNS to do that

not sure your example domain is the best, can you lookup hrowood.biz?

try this link https://play.google.com/apps/testing/com.x8bit.bitwarden.beta/join?hl=en-US

thanks, have found the Andriod beta and installed it. Not blocked as I run vaultwarden

this might be what your looking for -> https://docs.pi-hole.net/guides/dns/unbound/

WOW, that is amazing. How do I get the new beta?

great work, But I haven't got 0.19.4 sorted yet