It appears the image runs as a non root user at least… You can drop unnecessary capabilities https://oneuptime.com/blog/post/2026-01-16-docker-drop-capabilities/view

You can also add firewall redfrictions to container to only allow it to connect to services you want to limit injection attacks.

This would help, but still could be open to a lot of security problems I’d imagine.

I been watching this one but lacking docker images published from anywhere but docker.io has kept me from wanting to migrate to it, glad to see its being added in v2.0.0 though.

Yeah I updated too don’t auto update but I have renovate monitor updates and submit PRs for it. All running good here.

v2.5.2 is planned to release today, they pulled v2.5.0 android apk since there was a bug with it. So I’d suggest waiting for the release today at least.

If public key is denied forgejo is setup, but you have an old connection in your authorized_keys file probably form using gitea. Remove the line, it should prompt you to accept public key on next ssh session. This is a basic ssh functionality probably why you were downvoted I guess.

Gitea and forgejo configs were 100% same at some point, check forgejo news for when the last version that supported gitea migrations. That said it should still be pretty close.

Velero is the backup solution for PVCs and k8s way.

I have tried quite a few and found blocky to be very easy and reliable.

I use multiple DoH servers upstream, it sorts out which ones better response times and uses it more often, but splits them still. I have over 20 devices using it and its been running well.

It also can prefetch common domains and caches them per config. I got A 40% cache rate with running 3 of them for redundancy.

I’d recommend finding a cheap VPS using https://lowendbox.com/. I got a 3GB RAM 3 core plan for $32/year this is slightly overkill, prpbably, but it also had higher bandwidth limits. Add wireguard and setup routing for the vps public IP.

A javascriptless check was released recently I just read about it. Uses some refresh HTML tag and a delay. Its not default though since its new.

As long as its not configured improperly. When forgejo devs added it it broke downloading images with Kubernetes for a moment. Basically would need to make sure user agent header for federation is allowed.

Yeah operators are extremely nice. I used bitnami images before operator in HA setup and it would fail all the time. Using operators I have like 12 postgres DBs and 0 issues for well over a year.

Btw, self hosting communities tend to shy away from k8s due to complexity and generally enterprises use it so less selfhosters use it. I wanted redundancy and to keep me learning tech, less crazy people tend to go with proxmox for clustering in these communities.

Some operators for postgres is free for non commercial use, so its not truly open source even though its source available, one is crunchydata.

pgvecto.rs v0.4.0 I assumed was just not renamed. They have one for vectorchord too

Operators are good ways to support applications in CLI that aren’t easy to setup in a cluster by default. You can make these databases redundant by setting replica higher than 1 and applying it, operator copies the db data and makes a new replica. It also helps with backups and restoring too.

If you are using Kubernetes, I highly recommend investing time into installing an operator. The best open source one with less restrictive licensing is cloudnative pg. VectorChord builds official images for CNPG that includes the extension.

Yeah I see nothing that using a local version that would cause that… Hmm next I would try mixing CDN ref and local ref for js/CSS try to pinpoint what one is making it buggy.

Looks like

../images/loading.gif

…/ means previous directory so if CSS is public/css you want public/images.

Ah I didn’t think of the image references! Yeah probably better off downloading the whole library when it requires the other assets too. Its likely soft linking at point of the css file and you’d need assets paths stored in reference to the CSS file.

How would things break from including it yourself? Just download the file from the links in your post and include them on your webserver it shouldn’t require any code changes beyond that. You also never know if they would take down an old version or if some outage will occur so I’d personally rather host them instead of relying on additional servers to work.

Yeah I was looking at all of their services tbh but that one looks expensive at first ignoring the deal ~$8/mo. I suppose if you are actively using 4+ TB its not too bad though.

I guess its comparable to others in ways with free api calls / egress but they charge a flat rate higher than others on storage.

Wow IDrive looks extremely expensive for backups, unless if there is something I am missing.