Man I love TUIs, Great work!

Thank you!

Hospice is end of life care.

I had to look it up since I’m not a native English speaker.Truly a sad day for selfhosters, his scripts have helped the community tremendously, I hope the best for him and his family.

How do you use obtainium to download from their repo? I’m trying but can’t seem to make it work.

Thanks for the nice write-up, saving it in case I find myself behind CGNAT in the future.

I’m not sure I understand what you are trying to do, since you’re gonna have a vps, why not move your reverse proxy over to it and have that as the only entrypoint to your network using tailscale or wireguard for it to connect to your home services?

Seems they’re running a podcast now:

https://youtu.be/xMTK3aaBOz4

Take a look at this:

https://www.privacyguides.org/en/android/general-apps/

Shelter is recommended over Insular and Island as it supports contact search blocking.

When using Shelter, you are placing complete trust in its developer, as Shelter acts as a Device Admin to create the Work Profile, and it has extensive access to the data stored within the Work Profile.

I also remember starting with island but changing to shelter because it supports app pausing without using a third party proprietary app to pause work apps

I’ve been using their 1€/month vps for a couple of years now as a reverse proxy, but I use HAproxy and wireguard. It’s been working flawlessly.

I like Better offline. It’s not just about privacy, but it’s really good.

Extensions installed on any browser make your fingerprint more unique. For PC your best option against fingerprinting would probably be using n unmodified mullvad browser, and on android, mull, with the least extensions posible.

Now they’re working

They’re not working for me

Stealth still works for me

Might be some NFS permissions problem, can you try some other temp directory with say 777 permissions to see if it’s that?

Ah! now I see the problem

permission denied, mkdir ‘upload/library’

It’s clearly having permission problems with the image library directory.

Also:

volumes:
 - /mnt/NAS-immich-folder:/mnt/immich
 - ${UPLOAD_LOCATION}:/mnt/immich

with this command you are trying to mount this directory from your LXC machine:

/mnt/NAS-immich-folder

into this directory inside the immich container:

/mnt/immich

And then you also try to mount a second directory there in the next line. But immich doesn’t use /mnt/immich for its library, it uses this:

/usr/src/app/upload

You should NOT edit the default docker-compose.yml file. Instead you should only edit the .env file like so:

UPLOAD_LOCATION=/mnt/NAS-immich-folder

I can also see that there’s a specific tutorial on how to set it up with portainer. In that case you might have to edit the docker compose file to replace .env with stack.env and place the contents of the env file in the advanced-> environment variables of portainer.

Try these things and ask here again if you can’t get it running.

That all seems correct, the way to expose services with a docker-compose is by using the:

ports:
  - 2283:3001

That means that you expose whatever is at port 3001 in the cointainer (in this case the Immich server inside the docker container, which is exposed by default to 3001) to port 2283 of the host machine (in this case, your LXC container). So it should work if everything else is set up correctly.

The 172.x.x.x networks are normal internal networks for docker to use, normally you needn’t care about them because you just expose whichever port you need via the ports command above.

Are you following this step by step to set it all up? is your .env file properly set up? did you check the containers logs?

I have Immich working fine inside an LXC with docker, You just gotta make sure that Keyctl and Nesting are activated in the LXC container’s options in Proxmox and make sure to use the Immich recommended docker-compose file.

If you still have problems try to take a look at the containers logs with the “docker logs” command to see if there’s an error message somewhere.