u/Bluepenguin053

[SCALE] Native apps vs. Docker compose.

Hello all, im rebuilding my server and per what I'm reading Docker compose is the way to deploy apps vs using native apps. However there's a few things that bother me with this.

  1. if multiple apps are made with 1 docker compose they are all bundled under the same app in the app menu.
  2. apps don't have icons to easily identify them.
  3. is it better to make 1 compose file for each app, or make 1 big monolithic one?
reddit.com
u/Bluepenguin053 — 3 days ago

Do I still need to port forward on my router for port forwarded gluetun?

My question is the title.

Docker file JIC I'm doing something wrong.

services:
gluetun:
cap_add:
- NET_ADMIN
container_name: gluetun
devices:
- /dev/net/tun:/dev/net/tun
environment:
- VPN_SERVICE_PROVIDER=private internet access
- OPENVPN_USER=USER
- OPENVPN_PASSWORD=PASS
- SERVER_REGIONS=Switzerland
- PORT_FORWARD_ONLY=true
- VPN_PORT_FORWARDING=on
- >-
VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c 'wget -O- --retry-connrefused
--post-data "json={\"listen_port\":{{PORTS}}}"
http://127.0.0.1:30024/api/v2/app/setPreferences 2>&1'
- OPENVPN_PROTOCOL=udp
- FIREWALL_VPN_INPUT_PORTS=6881
image: qmcgaw/gluetun
ports:
- '30024:30024'
- 6881:6881/tcp
- 6881:6881/udp
restart: unless-stopped
volumes:
- /mnt/Tank/Apps/Gluetun:/gluetun
qbittorrent:
container_name: qbittorrent
depends_on:
- gluetun
environment:
- PUID=568
- PGID=568
- TZ=America/Detroit
- WEBUI_PORT=30024
image: lscr.io/linuxserver/qbittorrent:latest
network_mode: service:gluetun
restart: unless-stopped
volumes:
- /mnt/Tank/Apps/qBittorrent:/config
- /mnt/Tank/Data/Torrents:/data/torrents
version: '3'

reddit.com
u/Bluepenguin053 — 5 days ago

Hello,
Reading through the wiki I feel Like I'm making a mistake. I'm following the guide set here: https://github.com/qdm12/gluetun-wiki/blob/main/setup/providers/custom.md#wireguard

My questions, to do the WG config do I need to run pia-wg-config on my server I intend to run it from or will my local PC work? is there a video I can follow along with of someone doing this setup as I want to ensure I do this correctly.

I have the following yml file:

version: "3"

services:

gluetun:

image: qmcgaw/gluetun

cap_add:

- NET_ADMIN

devices:

- /dev/net/tun:/dev/net/tun

environment:

- VPN_SERVICE_PROVIDER=custom

- VPN_TYPE=wireguard

- WIREGUARD_ENDPOINT_IP=EndpointProvidedByPIA-WG-Config

- WIREGUARD_ENDPOINT_PORT=PortProvidedByPIA-WG-Config

- WIREGUARD_PUBLIC_KEY=PublicKeyProvidedByPIA-WG-Config

- WIREGUARD_PRIVATE_KEY=PrivateKeyProvidedByPIA-WG-Config

- WIREGUARD_ADDRESSES=AddressProvidedByPIA-WG-Config

- VPN_PORT_FORWARDING=on

- VPN_PORT_FORWARDING_PROVIDER=private internet access

- VPN_PORT_FORWARDING_USERNAME=yourusername

- VPN_PORT_FORWARDING_PASSWORD=yourpassword

- SERVER_NAMES=the-tls-server-name Not sure what to put here to get Swiss?

u/Bluepenguin053 — 7 days ago

Hello,

I built my box a few years back and my information is horribly outdated. I was routing all my server traffic through wireguard hosted on OPNsense, but i have recently learned that it's better to route individual apps. Can anyone point me to some documentation on how best I could accomplish that?

I have unfortunately forgotten a lot of what I initially set up, but what im reading now is that Glutun is popular.

Any information would be appreciated.

reddit.com
u/Bluepenguin053 — 7 days ago
▲ 10 r/truenas

Hello,

My ask is esentually the title. I used to use host path when I set this up several years back, but as I go through this now is there a reason I shouldn't just nix my apps dataset and just use ixVolumes?

Jellyfin for example can be setup with an ixVolume for Configs and Logs with a temporary dataset for Transcodes. Is there a reason I shouldn't do this?

reddit.com
u/Bluepenguin053 — 8 days ago