Manjaro is not Arch!

Yes. But if I wanted to be petty I would have switched over to Gentoo.

Arch is wisdom. Every LTS-type distro is bound to catch issues due to lags and discordance in release cadence and worse of all, distro-specific patches that complicate things and by themselves have the potential to introduce unique CVE’s like one I was reading recently about Ubuntu involving OverlayFS.

Comments inside the docker-compose.yml files?

Maybe give cloudflared a try. Works for me even with nextcloud’s ssl (don’t think there’s a way to start NC without the self-signed cert). Couldn’t get it to work with NPM (I admittedly don’t know much about nginx) so I brought in the big gun(s).

Backblaze b2, borgbase.com. There are also programs like dejadup that will let you backup to popular cloud drives. The alternatives are limitless.

No minimum requirements. And here you go:

#version: "3.8"
services:
  invidious:
    image: quay.io/invidious/invidious:latest
    restart: unless-stopped
    security_opt:
      - no-new-privileges
    container_name: invidious
    stop_grace_period: 3s
    ports:
      - 127.0.0.1:3000:3000
    environment:
      INVIDIOUS_CONFIG: |
        db:
          dbname: invidious
          user: invidious
          password: superstrongpassword491
          host: postgres
          port: 5432
        check_tables: true
        popular_enabled: true
        login_enabled: false
        statistics_enabled: true
        hsts: true
        hmac_key: *PICK-A-LONG-RANDOM-STRING*
        https_only: true
        external_port: 443
        use_quic: true
        database_url: postgres://invidious:superstrongpassword491@postgres/invidious?auth_methods=md5,scram-sha-256
        force_resolve: ipv4
        domain: *your.domain.com*
    healthcheck:
      test: wget -nv --tries=1 --spider http://127.0.0.1:3000/api/v1/comments/jNQXAC9IVRw || exit 1
      interval: 30s
      timeout: 5s
      retries: 2
    depends_on:
      - postgres

  postgres:
    image: postgres:15-alpine
    container_name: postgres
    security_opt:
      - no-new-privileges
    restart: always
    # purposefully excluded volumes section
    # the database will reset on recreate
    environment:
      POSTGRES_DB: invidious
      POSTGRES_USER: invidious
      POSTGRES_PASSWORD: superstrongpassword491
    healthcheck:
      test: pg_isready -U invidious -d invidious
      interval: 10s
      timeout: 5s
      retries: 5

I’ve hosted invidious relatively easy for a while now. Simple UI and just works. If anyone needs my compose and config setup, reply and I’ll post it.

Haha. Said the hoader with tonnes of content he’s never going to finish watching.

Oracle cloud + Docker:

• adguardhome*
• portainer
• jellyfin*
• microbin
• glances
• sonarr
• radarr
• invidious
• flaresolverr
• changedetection
• cloudflared-proxy
• npm
• bazarr
• nextcloud
• gluetun
• qbittorrent
• stremio
• jackett
• searxng
• prowlarr

*I use cloudflare workers to host a dns resolver which I use as upstream for adguardhome. I use jellyfin as an ephemeral hub for video (all of them x265 to save on space). After I watch something (usually tv episodes), it gets auto-deleted after 3 days. torrents seed for 14 days.

Maybe you should familiarize yourself with CentOS Stream and its purpose.

Backup $home and /etc. That should be good enough.

They provide the best balance for efficiency. Not too powerful enough to be a workhorse and not to weak to run multiple simple applications/services. NUCs are great in that they come with hardware video acceleration tech that’s highly optimized for media transcoding.

You know what the worst part is. We, The people let them do this to us.

This is nice. Shame it won’t support systemd.

You don’t get any network isolation with this approach vs a service running in its own dedicated virtual network. Just for this reason, I think Wireguard as a VPN access to other local services is insecure.

I always see guys swearing by Wireguard for VPN access as a security measure and seems to me like if someone unauthorized gets your public key, they have access to the kingdom.

Yes. Flathub aims to replace your distro’s repository as the source for non-system packages.

Install Opensuse Leap.

Podman could never compare to the quality of docker. I wish people who don’t know any better would just stop comparing the two and suggesting podman as a replacement.