this post was submitted on 22 Feb 2025
8 points (75.0% liked)

Sysadmin

8100 readers
6 users here now

A community dedicated to the profession of IT Systems Administration

No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
[email protected]
[email protected]
[email protected]
[email protected]

founded 2 years ago
MODERATORS
 

checkout "My checklist and tips for server setup"

Please share your tips and tricks with me. I would love to hear them and use them.

Any feedback is welcomed.

you are viewing a single comment's thread
view the rest of the comments
[–] somegeek 3 points 23 hours ago (2 children)

Thank you for pointing this out about the missing firewalld step! I will update my post.

The docker network+reverse proxy is also how I handle things too.

Podman seems easy to migrate, and works fine with firewalls.

[–] [email protected] 1 points 13 hours ago

I got super lucky, someone created a restart policy for Podman just a week ago. It works without changing anything to my docker-compose.yml files, as long as the file states restart: always. Following Alpine's Wiki to install and setup Podman followed by the instructions on this Github Repository and everything works quite well on Alpine Linux.

I'll have to play around with Podman some more and give it time to see how it holds up, but so far it seems promising.

[–] [email protected] 2 points 19 hours ago

I've spent a few hours with Podman and I was able to get my reverse proxy and a couple smaller services running which is quite nice. I'm using Alpine Linux so there were some extra steps I had to follow but their wiki handles that pretty good. The only issue I need to figure out is how to auto start my services on a system restart since Podman seems to focus on Systemd development. This seems like a good start but I think I need to figure out how pods and containers work in Podman first.

I've only started learning this stuff not too long ago but I'm surprised how relaxed Docker is with port management. I was under the impression that docker is more secure because it's containerized. Even more surprising was how little documentation there is for how to secure Docker ports.