Search

How to fork a docker image?
Solved!
more expanded details can be seen here:
Thank you, all!
hey all!
i need some guidance. can you help point me in the right direction?
there a docker image that is basically fine, except i just want to add a group to it so that group will exist in the container.
how do i do this? is there a way to do this that will just pull the original image as is, so it will update when the original image updates, and then just add the group i need?
thanks in advance!

Caddy + DeSEC.io + DNS Challenge
For a couple weeks I've been struggling to get TLS over Caddy with DNS challenges. My ISP blocks incoming data on ports 80/443 and I was looking to use an uncommon port (5050) for my personal needs.
I've followed the instructions here and I've made sure to use the proper DeSEC.io module in my docker build.
When I start my docker container and check the logs, I get an error that says the challenge failed because of an incorrect TXT record. However when I check DeSEC.io's website, the TXT record that was created matches the Caddy log error message and even shows that the TXT record has been last touched "less than a minute ago."
I've tried minimizing my Caddyfile to the bare minimum and I still can't seem to get TLS working.
::: spoiler Dockerfile
FROM caddy:2.10.0-builder AS builder RUN xcaddy build \ --with github.com/caddy-dns/desec FROM caddy:2.10.0 COPY --fr

Podman quadlet adding files to container
i just ended up going with a new image with the components installed, which i've been informed is best practice.
Hey there!
i have an Owncast container that needs two extra files added to it every time it starts up because the base image doesn't include them. they can be downloaded from within the container. i just need a way to tell the container to always do that when it starts up.
i've tried adding this to my quadlet:
[Container]
Exec=apk update && apk add --no-cache mesa-va-gallium mesa-dri-gallium
but it doesn't work.
does anyone know how to correctly automate this?
thanks!

Owncast, SELinux, Podman, Hardware Accelaration
SOLVED: turns out mesa is not enough for this. i also had to install:
mesa-va-gallium mesa-dri-gallium
now we're good!
hi all!
i've hit a wall here and could use your input if you have any thoughts!
i'm running Owncast latest via rootful Podman on a distro with SELinux.
i'm trying to implement hardware acceleration via the server's AMD GPU, but it is not working.
AMD Radeon RX 7600
Kernel: 6.15.4-1-default
i've turned VAAPI on in the web admin settings.
the container comes with ffmpeg 6 and libva.
For SELinux, i've run:
setsebool -P container_use_devices true
In my quadlet i've added:
[Container]
AddDevice=/dev/dri
Exec=apk add mesa
the devices appear rw in the container:
/app # ls -l /dev/dri
total 0
crw-rw---- 1 root 486 226, 0 Jul 9 15:58 card0
crw-rw---- 1 root 489 226, 128 Jul 9 15:58 renderD128
here is the error i'm getting:
`time="2025-07-09T15:58:46Z" level=error msg="[AVHWDevi

ELI5: How to put several servers on one external IP?


I'm pretty new to selfhosting and homelabs, and I would appreciate a simple-worded explanation here. Details are always welcome!
So, I have a home network with a dynamic external IP address. I already have my Synology NAS exposed to the Internet with DDNS - this was done using the interface, so didn't require much technical knowledge.
Now, I would like to add another server (currently testing with Raspberry Pi) in the same LAN that would also be externally reachable, either through a subdomain (preferable), or through specific ports. How do I go about it?
P.S. Apparently, what I've tried on the router does work, it's just that my NAS was sitting in the DMZ. Now it works!

How to install psql extention (VectorChord) in bitnami/postgresql
Hello,
Im planning on running a postgresql server on my k3s cluster using the bitnami/postgresql helmchart & container image. I already set it up for testing and it works really well.
But since newer versions of immich are moving to VectorChord I would like to install this extention so i can move my immich database to this postgresql server.
I already tried to search how i should/could install an extention in the bitnami/postgresql image but I haven't found something usefull to me. Im not a postgresql expert so maybe i missed some stuff :).
Does someone have experience with this or know in which direction i should like i would greatly appreciate it.
Thanks for your time and have a wonderfull day!
EDIT: Could someone explain me why im getting downvotes for this post? Is the way i wrote it not good? Is it a bad question? Is the software i mentioned unpopular?

Docker is renaming a mounted drive
So I recently moved most of my docker storage to a second hard drive, called "storage." After a system restart, docker is creating a folder called "storage," forcing the physical drive to be renamed "storage1." How do I prevent this from happening?
I am using Xubuntu.
Edit: As suggested, it was indeed my system spinning up Docker before mounting the internal disk. The solution (should work on most Unix-like systems) was to manually add a line to /etc/fstab as follows: First get the UUID for the problem drive
undefined
~$ sudo blkid -s UUID
The output will show your drives and the UUID of each. Then edit the following file:
undefined
~$ sudo mousepad /etc/fstab #{or use your choice of editor, i.e. nano}
Add the following line:
undefined
/dev/disk/by-uuid/{UUID number copied from blkid output} /destination/of/your/drive ext4 defaults 0 0
Of course replace {UUID number copied from blkid output}
and /destination/of/your/drive
and set defaults & parameters as needed. These worked fo

How do I run docker compose on Bazzite?
I'm not really sure where the right place to ask is, but I figure this is a good place for docker related questions.
I have recently installed Bazzite as my daily driver, previously I was on Nobara. The main difference here is that Bazzite is immutable, so you can't (or shouldn't) install stuff in the normal way as it may get overwritten by updates.
I have a bunch of docker compose YAML files. I want to run these locally. But I also don't want to tweak anything in the files to get them running because they should be able to be copied to a prod environment as is or the local test environment isn't a good test. Prod would be either my Linux Mint server or an Ubuntu Server one.
Bazzite has a ujust script available for installing docker, but this doesn't include docker compose, and I'm not sure how to add that in.
Searching online shows everyone saying just use podman, it comes pre-installed and is a drop in replacement. The problem is that it doesn't work.
Maybe that's my question, w

Looking for ... inventory management, I guess?
Hey everyone,
I'm looking for a system that:
- I can self host
- Is slim, because I don't have beefy hardware (Intel J5040, 32GB RAM, shared by all VMs/containers)
- can be used to create an inventory of all the tech/hardware that I have in my house (not exclusively IT, I also wasn't to track things like warranty for my chainsaws and the like)
- does take at least the device make/model, serial number (for insurance cases) and warranty dates
- is not some kind of enterprise-how-many-items-of-this-article-do-i-have-in-stock-things, because that seems to be the only thing I seem to be able to find, and they neither match my use case nor do they seem to be lightweight enough.
... and honestly, I don't even know where to start looking. Do you guys have any recommendations?
Of course, I could just use a spreadsheet, but where's the fun in that?
EDIT: Thank you all so much for the engaged discussion and all the suggestions, you're the best!

How to forward real IP from Caddy server?
Hello,
I have hosted azuracast in my minipc and I want to forward the IP of the song requester, right now it's only taking one IP the "podman container ip" so basically Azuracast thinks that every request is coming from the IP address 10.89.1.1 which is the IP of interface created by podman.
undefined
57: podman3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether 0e:fa:6d:33:b9:39 brd ff:ff:ff:ff:ff:ff inet 10.89.1.1/24 brd 10.89.1.255 scope global podman3 valid_lft forever preferred_lft forever inet6 fe80::b876:abff:fede:c3ef/64 scope link valid_lft forever preferred_lft forever
also I am explicitly forwarding the IP using X-Forwarded-Host.
undefined
reverse_proxy http://localhost:4000/ { header_up X-Forwarded-Host {host} }
I don't know how to resolve it, any help would be appreciated :)
Edit: I didn't had to so any of this stuff, what I should have done is just enabling "reverse proxy" option in Azuraca

Nextcloud AIO inside container - domain verification fails
I am setting up nextcloud AIO in a podman container on my VPS. After some struggle, I got to the installation page, but domain checking is simply not working out.
After looking up, I decided to check the port from host machine. Strangely, curl localhost:11000
hangs indefinitely.
nextcloud-aio-domaincheck
container is running, and it mapped port as 0.0.0.0:11000->11000/tcp
. The domaincheck server should be reachable, and I don't think firewall would be preventing localhost access..
The single line log from domaincheck container is:
undefined
2025-03-20 13:47:43: (../src/server.c.1939) server started (lighttpd/1.4.76)
I am utterly lost here. Does anyone know what would be possible reasons, and how to troubleshoot the issue? Any pointers would be greatly appreciated. Thank you in advance!
EDIT: Just ran sudo podman exec nextcloud-aio-mastercontainer curl nextcloud-aio-domaincheck:11000
, it seems to work in the internal network. At a loss how this does not get exposedd to the host

How do I debug network issues, regarding caddy in podman?
Disclaimer: I am running personal website on cloud, since it feels iffy to expose local IP to internet. Sorry for posting this on selfhosting, I don't know anywhere else to ask.
I am planning to multiplex forgejo, nextcloud and other services on port 80 using caddy.
This is not working, and I am having issues diagnosing which side is preventing access.
One thing I know: it's not DNS, since dig <my domain>
works well.
I would like some pointers for what to do in this circumstances. Thanks in advance!
What I have looked into:
- curling localhost from the server works well, caddy returns a simple result.
curl <my domain>
times out, currently trying to inspect packets - it seems like server receives TCP without HTTP.curl <my domain>:3000
displays forgejo page, as forgejo exposes at 3000 in its container, which podman routes to host 3000.
EDIT: my Caddyfile is as follows.
undefined
:80 { respond "Hello World!" } http://<my domain> { respond "This should respond" } http:/

How do I give Jellyfin permanent access to an external drive?
I didn't like Kodi due to the unpleasant controls, especially on Android, so I decided to try out Jellyfin. It was really easy to get working, and I like it a lot more than Kodi, but I started to have problems after the first time restarting my computer.
I store my media on an external LUKS encrypted hard drive. Because of that, for some reason, Jellyfin's permission to access the drive go away after a reboot. That means something like chgrp -R jellyfin /media/username
does work, but it stops working after I restart my computer and unlock the disk.
I tried modifying the /etc/fstab file without really knowing what I was doing, and almost bricked the system. Thank goodness I'm running an atomic distro (Fedora Silverblue), I was able to recover pretty quickly.
How do I give Jellyfin permanent access to my hard drive?
Solution:
- Install GNOME Disks
- Open GNOME Disks
- On the left, click on the drive storing your media
- Click "Unloc

I've set up docker services behind nginx proxy manager so they're accessible with https, but the http services are still open. How do I close them?
I'm using a docker compose file, and I have everything running just fine, containers talking to each other as needed, NPM reverse proxying everything via a duckdns subdomain... everything's cool.
Problem is, I can still go to, for example, http://192.168.1.30:8080/ and get the services without http.
I've tried commenting out the ports in the compose file, which should make them only available on the internal network, I thought. But when I do that, the containers can no longer connect to each other.
Any advice for me?
Edit:
Thanks for the quick & helpful suggestions!
While investigating bridge networks, I noticed a mention that containers could only find each other on the default container bridge by container name, which I did not know. I had tried 127.0.0.1, localhost, the external IP, hostnames, etc but not container names.
In the end, the solution was just to use container names when telling each container how to find the others. No need for creating bridge ne

Nextcloud can't see config.php in new install directory
Update: Turned out I had like 3 versions of php and 2 versions of postgres all installed in different places and fighting like animals. Cleaned up the mess, fresh install of php and postgres, restored postgres data to the database and bobs your uncle. What a mess.
Thanks to everyone who commented. Your input is always so helpful.
Original Post
Hey everyone, it's me again. I'm now on NGINX, surprisingly simple, not here with a webserver issue today though, rather a nextcloud specific issue. I removed my last post about migrating from Apache to Caddy after multiple users pointed out security issues with what I was sharing, as well as suggesting caddy would be unable to meet my complex hosting needs. Thank you, if that was you.
During the NGINX setup which has gone shockingly smoothly I moved all of my site root directories from /usr/local/apache2/secure to /var/www/
Everything so far has moved over nicely... that is until nextcloud.

Can't renew cert on a self-hosted lemmy instance D:
EDIT: Thanks everyone for your time and responses. To break as little as possible attempting to fix this I've opted to go with ZeroSSL's DNS process to acquire a new cert. I wish I could use this process for all of my certs as it was very quick and easy. Now I just have to figure out the error message lemmy is throwing about not being able to run scripts.
Thank you all for your time sincerely. I understand a lot more than I did last night.
Original Post
As the title says I'm unable to renew a cert on a self-hosted lemmy instance. A friend of mine just passed away and he had his hands all up in this and had it working like magic. I'm not an idiot and have done a ton of the legwork to get our server running and working - but lemmy specifically required a bit of fadanglin' to get working correctly. Unfortunately he's not here to ask for help, so I'm turning to you guys. I haven't had a problem with any of my other software such as nextcloud or pixelfed but for some re

Proxmox not conncected to internet, but is reachable on LAN
[SOLVED] Turns out I'm just a bigger moron than I thought. The MAC address of my server had accidentally been flagged in my router for black listing.
As the title says, my proxmox host is apparently not able to reach the internet anymore, not sure for how long this has been an issue, I rarely work on the host itself. It can ping other devices on my network just fine, and other devices can ping it. I can also SSH in to it and access the web interface. My VMs are connected to the internet without any issues. I don't need to access the host remotely/outside my home network, this is just for updating it etc.
I can't see the host under active devices in my router though.
I have been trying to figure why, but so far without any luck.

I want to ditch Nextcloud notes
Hi.
I'm curently using Nextcloud notes for its convenience. I use the app on my phone, and the webui on my pc.
I'm willing to ditch Nextcloud as a whole, so I want to replace my note taking habits.
I've tried Trilium, which lacks an Android app, and I feel the WPA makes the UI unpractical and hard to read.
I've tried Joplin, but it lacks a webui.
Are there other alternatives I've missed out ?
Solution: I ended up finding Flatnotes. It's dead simple to run and to use, has markdown and WYSIWYG, and the WPA is flawless.