deleted by creator

My issue with mgmt.config is that it bills itself as an api-driven “modern” orchestrator, but as soon as you don’t have systemd on clients, it becomes insanely complicated to blast out simple changes.

Mgmt.config also claims to be “easy”, but you have to learn MCL’s weird syntax, which the issue I have with chef and its use of ruby.

Yes, ansible is relatively simple, but it runs on anything (including being supported on actual arm64) and I daresay that layering roles and modules makes ansible quite powerful.

It’s kind of like nagios… Nagios sucks. But it has such a massive library of monitoring tricks and tools that it will be around forever.

Running the k8s in their own VM will allow you to hedge against mistakes and keep some separation between infra and kube.

I personally don’t use proxmox anymore, but I deploy with ansible and roles, not k8s anymore.

Besides being easy, there is no advantage to tailscale for this case, and I would add that lots of us don’t want to depend on an external resource just to road warrior back home.

I think you’re still OK.

There are lots of great itx boards out there, so basically take your pick. And there will be ppl who say you don’t need ecc, but it certainly won’t hurt, it will just cost a bunch more.

I run a supermicro mini itx with ecc, for my zfs backup, but my non ecc machines have also been fine.

You’re fine with this setup, and in many respects it’s overkill.

I run 33 containers including jellyfin, frigate, and immich as the hardest working ones across 2 HP elitedesk g4 with 48 GB ram, and a 3rd low power system hosting 8gb NFS for storage on simple gigabit lan. Even that is overkill for these tasks.

The apps most commonly run in a self-hosted env are really quite lightweight and spend most of their time at idle.

So you know that this is the lesser of the two evils? Seems like you’re viewing it from client’s perspective only.

No one wants to burden clients with Anubis, and Anubis shouldn’t exist. We are all (server operators and users) stuck with this solution for now because there is nothing else at the moment that keeps these scrapers at bay.

Even the author of Anubis doesn’t like the way it works. We all know it’s just more wasted computing for no reason except big tech doesn’t give a care about anyone.

I think the big deciding factor is how many folks will be watching remotely.

For my case, I use a VPN to tunnel back to my network and watch jellyfin that way. My son also lives away and watches jellyfin, but for him I simply punch a hole in my firewall for only his public ip, which doesn’t change much.

This works for me, but if I had to host for any more ppl, I would likely go the caddy route.

I had to get my glasses to re-read this comment.

You know why anubis is in place on so many sites, right? You are literally blaming the victims for the absolute bullshit AI is foisting on us all.