Man I love TUIs, Great work!

Hospice is end of life care.

I had to look it up since I’m not a native English speaker.Truly a sad day for selfhosters, his scripts have helped the community tremendously, I hope the best for him and his family.

Thanks for the nice write-up, saving it in case I find myself behind CGNAT in the future.

I’m not sure I understand what you are trying to do, since you’re gonna have a vps, why not move your reverse proxy over to it and have that as the only entrypoint to your network using tailscale or wireguard for it to connect to your home services?

Seems they’re running a podcast now:

https://youtu.be/xMTK3aaBOz4

I’ve been using their 1€/month vps for a couple of years now as a reverse proxy, but I use HAproxy and wireguard. It’s been working flawlessly.

Now they’re working

They’re not working for me

Might be some NFS permissions problem, can you try some other temp directory with say 777 permissions to see if it’s that?

Ah! now I see the problem

permission denied, mkdir ‘upload/library’

It’s clearly having permission problems with the image library directory.

Also:

volumes:
 - /mnt/NAS-immich-folder:/mnt/immich
 - ${UPLOAD_LOCATION}:/mnt/immich

with this command you are trying to mount this directory from your LXC machine:

/mnt/NAS-immich-folder

into this directory inside the immich container:

/mnt/immich

And then you also try to mount a second directory there in the next line. But immich doesn’t use /mnt/immich for its library, it uses this:

/usr/src/app/upload

You should NOT edit the default docker-compose.yml file. Instead you should only edit the .env file like so:

UPLOAD_LOCATION=/mnt/NAS-immich-folder

I can also see that there’s a specific tutorial on how to set it up with portainer. In that case you might have to edit the docker compose file to replace .env with stack.env and place the contents of the env file in the advanced-> environment variables of portainer.

Try these things and ask here again if you can’t get it running.

That all seems correct, the way to expose services with a docker-compose is by using the:

ports:
  - 2283:3001

That means that you expose whatever is at port 3001 in the cointainer (in this case the Immich server inside the docker container, which is exposed by default to 3001) to port 2283 of the host machine (in this case, your LXC container). So it should work if everything else is set up correctly.

The 172.x.x.x networks are normal internal networks for docker to use, normally you needn’t care about them because you just expose whichever port you need via the ports command above.

Are you following this step by step to set it all up? is your .env file properly set up? did you check the containers logs?

I have Immich working fine inside an LXC with docker, You just gotta make sure that Keyctl and Nesting are activated in the LXC container’s options in Proxmox and make sure to use the Immich recommended docker-compose file.

If you still have problems try to take a look at the containers logs with the “docker logs” command to see if there’s an error message somewhere.

If you’re using torrents, I’d say your best bet would be to try to get into a Spanish private tracker and redownload everything. The ones I’m in have absolutely everything in 4k with dual audio, one being Spanish and the other being the original audio (generally English). I’m aware it might take a while to get into a good one, but once you’re in, you’ll have everything you need.

My phone auto connects with wireguard as soon as I leave my home ssid, so I never lose access to my services.

How do you do that? Tasker?

Oh wow, I was looking for something like this. Thanks for drawing attention to it. I’ve just been using my phone and connectbot to do this until now.

Proxmox has an official guide on how to do this, which inlcudes these examples.

There’s also a video from Jim’s Garage where he sets up GPU passthrough in an unprivileged LXC container within proxmox.

See if any of that helps.

I discovered netdata yesterday and it’s looking pretty good