Not really through Caddy but for my setup I have it so the ssh port for Forgejo is only accessible through tailscale. So for push/pulling updated my ssh config file to something like

Host git.mysite.com HostName tailscaleMachineName User git Port 1234

Then doing git pull [email protected]:user/project.git works just fine as long as I am connected to tailscale

Otherwise you could open the port for Forgejo’s ssh so that you can access it without any vpn

I use Photoprism, mainly because it seems stable so far, and it’s good enough for my needs

May be related to this: https://github.com/jellyfin/jellyfin/issues/11380

I know my setup with intel integrated gpu worked prior to the release pf 10.9. Now I can’t get transcoding to work. In the comments they suggest the kernel version has something to do with it but for me it didn’t fix it. I’ll have to troubleshoot further today

Meanwhile transcoding works fine in Plex, so I feel it may be something specific to jellyfin

I can speak at least for rootless podman, I spent some hours on it and different ways I tried all ended in permission issues.

I gave up on trying to do it properly and just set the permissions of the /dev/dri device to 666, so that my podman container can use the gpu for transcoding.

Part of the issue with the container images that I tried is that they create a new user with whatever uid:gid I pass to the container, and so even if my nonroot user is part of the render group, the new user inside the container is not and so it can’t write to the /dev/dri/renderD128 (gpu), and so transcode wouldn’t work.

That’s where I left the troubleshooting at cause it was being a headache

Thanks for the resources, I’ll check them out later today!

Yeah I’m fairly certain it’s a permission issue. Having the gpu with permissions 666 makes it work inside the containers.

The thing is also that these container images (plex and jellyfin) create a separate user inside, instead of using the root user, and this new user (“abc” for lsio images) doesn’t get added to the same groups as the root user.

Also the render group that gets passed to the container appears as “nogroup”, so I thought of adding user abc to “nogroup” but still didn’t seem to work.

Thanks! I’ll take a look there

Yes I did the Systemd integration at the user level too and I quite like it

I managed this by using tailscale, with a kind of weird setup I think, but it just works.

I have tailscale on the VPS and my local server, let’s say its tailscale name is potatoserver

Then with Caddy on the VPS i have something like:

mywebsite.com { reverse_proxy potatoserver:port }

And so mywebsite.com is accessible on the clearnet through the VPS

Though given you’re getting rid of cloudflare tunnles I don’t know if you’d want to get into Tailscale. There’s Headscale too but I haven’t worked with it so I can’t comment

So far this is the only place I’ve seen mentioned regarding video streaming, that is still up anyway:

https://developers.cloudflare.com/support/more-dashboard-apps/cloudflare-stream/delivering-videos-with-cloudflare/

It’s not entirely clear and I don’t know if this is outdated or not.

I was using their proxy for video streaming for a while, but stopped cause I would rather not risk it. Maybe for personal use it could be ok

Oh, thanks for pointing that out. Didn’t know

So I got mixed results. With remote access disabled and just using subdomain for plex, it worked on the Windows desktop app, and my iPhone too through the browser, but on my Apple TV even though I could browse the library and select any video, they would not load.

What ended up working on all my devices is essentially running plex behind a VPN, AirVPN in this case because I need the port forwarding, and enabling remote access with the port assigned in AirVPN.

I followed this guide, in case you’re interested: https://reddit.invak.id/r/PleX/comments/152kihs/guide_plex_remote_access_without_port_forwarding/

I wonder if you can get around this by using cloudflare proxy for a domain and then in the settings for the server disabling remote access and only allowing discovery through your domain? I’m not with Hetzner but I’ll give this setup a try and see how it goes.

I currently have a VPS with Contabo. I think their prices are good. They have normal VPSs for more compute power with nvme storage, and they also have what they call Storage VPS, which I assume uses SATA ssds but they give you more storage vs the other ones. I’d say give them a look

The other day I learned about endlessh. I set that up, switched my actual sshd to listen on a different port, and the ssh login attempts from randoms essentially went down to 0. Pretty neat.