I’m iterating again on my lab setup and moving a few apps that I expose externally to their own VM so I can lock that sucker down even further. Right now I have a few different servers with podman/docker containers grouped by application type. e.g. critical apps: foregjo, nextcloud, vaultwarden. My arr stack. Media consumption. Knowledge & tracking apps, and general apps.

I eventually intend to throw the external apps into a DMZ VM but my network isn’t setup to do that right now, so instead I’m getting them set up on their own host and will lock down the firewall to only allow it to communicate with my reverse proxy and nothing else.

It’s been fun reworking my Ansible playbooks to do all my server provisioning (still need to figure out Terraform) along with running app installs and updates automatically at the press a button. Working with firewall rules via Ansible was a bit of a headache at first but now I’m in a really good spot.

I’m also testing out linkwarden and hoarder to finally replace what I lost with Omnivore a while ago.

I’ve been using Fossify Calendar for a while now and it’s been pretty great. I moved to it after the whole Simple apps getting sold drama when it happened.

Admittedly, I only use exit nodes in my state, but they do block Mullvad and Air.