This has been my journey.

I started with pure docker and hostpath on an Ubuntu server. This worked well for me for many years and is good for most people.

Later I really wanted to learn k8s so I built a 3 node cluster with NSF managed PVC for storage, this was fantastic for learning. I enjoyed this for 3 plus years. This is all on top of proxmox and zfs

About 8 months ago I decided I’m done with my k8s learning and I wanted more simplicity in my life. I created a lxc docker and slowly migrated all my workloads back to docker and hostpath, this time backed by my mirrored zfs files system.

I guess my point is what are you hoping to get out of your journey and then tailor your solution to that.

Also I do recommend using proxmox and zfs.

Have you looked into netbird? I have been thinking of setting that up over tailscale

I personally like lxc’s over vms for my home lab and i run a dedicated lxc for docker and one running a single node k8s.

So i see this alot and i understand it but at least in my country (canada) i have been torrenting for well over 15 years with out a vpn. The worst case is a 5k fine total but not before a letter from the isp forwarded to me on behalf of the copyright holder. Which i can ignore with out any issue since they have no idea who i am.

Issues will arise if you reply to them.

So is vpn required?

it depends on where you live and your confort with your risk.

I did a ninja edit about ports, but in your labels I only see web as an entrypoint

Edit, nm I see it not used to using labels for configuration it seems

Your entry point says, web should you not also have web-secure as well. I’m in my phone to forgive me if I missed some details

Edit: Not familiar with pod man, but are you should the port for the service isn’t 80 and not 8081 since it should be routing inside of podman?

Isn’t that what a TPM could be used for?

Tailscale/headscale are always recommended and they are good options but I want to recommend netbird as an alternative. This is what I have currently setup and it’s fantastic.

zpool scrub movies

Only thing required is this to be made explicitly illegal.