I am not sure if there is a good way to do it without scripting, and a router that would allow for taking variable input from an external script. But theoretically if the router would support it, you could script a port change at times there are no one on the server.

Essentially the server port is in a text file, you could use some command line utilities, and write a script leveraging something like sed to change the port in place.

But I am overcomplicating it. lol

I tried using Bazzite since I didn’t want to fuss with Wayland on Nvidia with Arch.

I had more gripes and more issues with an immutable distro than I ever did with my Arch install.

Stuck it out with Arch. It has taught me a lot.

The problem many folks have with Arch is the fact they don’t want to read or learn; well, newsflash, if you read and learn Arch isn’t exactly all that hard to use, setup, or maintain. It has better documentation than Bazzite and other newer distros. In fact, Arch Wiki has saved me hassle for other distros.

Your mileage may vary. However, I wouldn’t recommend an immutable distribution nec3ssarily to someone coming from Windows unless they want to shift from one paradigm to another.

Switching from Windows to something with such a vastly different approach in many cases will turn users away from using Linux. Their experience can dictate they switch away because of lack of knowledge and then proced to conflate every distro as just one “Linux” experience and not want to look back at it.

I still stand by one thing you will always hear me say: use the right tool for the job.

I will always recommend people to research their choice of distro. Use the right tool for the job.

What one person needs may differ from what another person needs. Take into account what the use case is for the machine you are using.

I use Arch BTW but I don’t run Arch for any of my servers. I use Arch where it makes sense for me.

I wouldn’t tell someone switching from Windows to just go balls to the wall and go for something blerding edge and arguably more maintenance or manual intervention needed.

I will give my suggestions but always implore them to research what theyt3 looking for.

I haven’t gotten around to setting it up yet, but for a google photos type self hosted setup there is Immich which looks promising!

I want to self host more, but power draw is a concern.

So I have gone the route of running to Pi 4 8gb models as my hosts of choice.

So far I am hosting:

Non-Docker:

• PiHole
• Unbound
• Wireguard (and Wireguard-UI)

Docker:

• ForgeJo
• Dozzle
• Homarr
• LinkWarden
• Traefik
• Watchtower

There are a few other services I want to get up, but I haven’t gotten around to it:

• Jellyfin
• Immich
• Nextcloud

As to why:

• ForgeJo to host my own git repositories (Docker Compose files, Chezmoi dot files, Miscellaneous configs)
• PiHole for ad blocking
• Unbound, well, having my own DNS
• Wireguard so I can connect to my home network
• Dozzle for easy log checking for my docker containers
• Linkwaren so I can backup bookmarks in a privacy friendly way
• Homarr for easy access to other web services I host
• Traefik so I can resolve IP:port to a hostname with SSL certificates even though everything I host is internal only
• Watchtower to update my Docker containers

I will likely have to do some tinkering, and more reading up on this from the documentation I am thinking. I am getting HTTP 200 statuses basically across the board. When going to the FQDN it doesn’t redirect to the PiHole admin page like I was expecting. Again, likely some configuration that I have wrong.

Begrudgingly 2 of the 3 are Google email addresses, and 1 is a Microsoft email address. I will however be ditching both of those providers for something a bit more privacy focused soon and making those addresses burner addresses.

Shows in traefik, no errors there.

I hate to report back, but something isn’t quite working for pihole behind Traefik.

running “docker logs traefik” returns no error, and yet no certificate was presented to my pihole.

Not sure what else I might be missing or that I might have wrong.

I will give this a shot! Thank you for the help. I will report back, in hopes that between your knowledge and my fumbles that someone else too can learn from this!

so in my traefik.yml file I have cloudflare set as my certresolver as follows:

certificatesResolvers:
  cloudflare:
    acme:
      email: email@example.com
      storage: acme.json
      caServer: https://acme-v02.api.letsencrypt.org/directory # prod (default)
      # caServer: https://acme-staging-v02.api.letsencrypt.org/directory # staging
      dnsChallenge:
        provider: cloudflare
        #disablePropagationCheck: true # uncomment this if you have issues pulling certificates through cloudflare, By setting this flag to true disables the need to wait for the propagation of the TXT record to all aut>
        #delayBeforeCheck: 60s # uncomment along with disablePropagationCheck if needed to ensure the TXT record is ready before verification is attempted 
        resolvers:
          - "1.1.1.1:53"
          - "1.0.0.1:53"

And I had to get the secret mounted via the docker-compose file.

So where you have:

tls:

        certResolver: examplecom-dns

Do I have to redefine all of the same information I did in my Traefik yml but in this separate config.yml?

(I did set it up in my traefik.yml and docker-compose.yml to mount and use this config, which I had commented out for later use.

Thank you so much for the help!

Edit:

Essentially I am trying to get my PiHole which is hosted on another pi setup with an SSL cert for local use only:

So in looking at your config I tried using:

http:
  routers:
    pihole-rtr:
      entryPoints:
      - https
      service: pihole-rtr
      rule: "Host(`ph.local.domain.com`)"
      tls:
        certResolver: cloudflare

  services:
    pihole-svc:
      loadBalancer:
        servers:
          - url: "http://<ip>/admin"

However when doing this error logs returned:

2024-07-08T15:04:27-04:00 ERR error="the service \"pihole-rtr@file\" does not exist" entryPointName=https routerName=pihole-rtr@file
2024-07-08T15:04:28-04:00 ERR error="the service \"pihole-rtr@file\" does not exist" entryPointName=https routerName=pihole-rtr@file

I am doing something very wrong… And feel a little lost.

Would the file provider configs live on the Traefik server, or would they need to be on the external service. Reading through this, and looking at the example configuration files doesn’t really seem to point that out. Sorry for the noob questions.

Trying to understand this, but the way the documentation is written is different than I am used to.

Thank you!

I want to investigate it. I know it works well on my laptop, which the big difference in the 2 is that one is an Nvidia GPU and the other an Intel Integrated. So it could be video related. Who knows.

Thank you all the same!

I may have misspoke, I use an AUR helper to install many programs and utilities, and am not at my computer to view the actual source. So I took a gamble and guessed AUR. My apologies.

It could have been other instability, as I mentioned in another comment I didn’t really look too deep into it since it wasn’t so important. And by no means am I blaming Thunderbird (regardless of source) for the issues I have had. It truly is a great email client.

Edit: It is from official source, not AUR. I have the same setup on my personal laptop. It came from Extras, and not AUR.

May have to investigate a bit. May have to figure out each directory to purge, do a pacman -Rnsu thunderbird

Then purge directories related, then reinstall.

Guess I will have to play around with it again. I never really investigated the crashes. Just moved away from it as email isn’t as important to my personal life as it is to my work life.

It was within the past week or 2. I completely understand. Thunderbird is awesome. It is likely an issue with my inbox sizes for the 3+ inboxes I have connected.

I will likely go back and try that. I however know just like in other email clients, if I have thousands of emails per account its bound to be slower. I did clean out each box. I plan to use Thunderbird again once I clear out all of those emails and consolidate to one email address.

I will have to investigate which directories to purge.

To get Nvidia working on Arch here is what I did:

During installation of Arch when it asked if I wanted to chroot into my distro I did. However if you enter commandline by hitting CTR+ALT+<F1 or F2 or F3> to change to a virtual console. If you are doing this from a chroot environment you don’t need sudo.

edit the mkinitcpio.conf

sudo nano /etc/mkinitcpio.conf

In the MODULES=() section I added “nvidia nvidia_modeset nvidia_uvm nvidia_drm” without quotes. So it looked like this:

MODULES=(nvidia nvidia_modeset nvidia_uvm nvidia_drm)

Afterwards I updated my initramfs images by running:

sudo mkinitcpio -P

Then I edited my grub config:

sudo nano /etc/default/grub

Find the line that says “GRUB_CMDLINE_LINUX_DEFAULT=”“”

GRUB_CMDLINE_LINUX_DEFAULT="nvidia-drm.modeset=1" 

Then I updated grub

sudo grub-mkconfig -o /boot/grub/grub.cfg

Note: I use the Nvidia Proprietary drivers

Resources: Arch Wiki

I do not recommend Manjaro especially if you are going to be using the AUR (Arch User Repository) as it can cause things to break.

I was using Thunderbird, but I have had a number of issues with it. Crashing seems to happen whether I use the Flatpak or install from AUR.

I have switched back to using web clients for my mail for the time being.

Good to know. Thank you!