• 1 Post
  • 6 Comments
Joined 7 days ago
cake
Cake day: September 12th, 2026

help-circle
  • You can run rootless Podman with Portainer, I do too. Or used to, before ditching Portainer.

    Can you elaborate on the ways a home lab is less secure if it runs a container management GUI? I’m open to learning more about it. What additional permissions does a GUI inherently require?

    Most companies I worked at used OpenShift in production, and I do not think it was considered an attack vector more than any other components of the ecosystem were. I would be surprised if this was a major factor when it came to security incidents.

    I don’t think that container privilege escalation vulnerabilities are correlated to the use of a GUI. To me, it is not a significant (or otherwise unique) risk. Even less so when we’re talking about a home lab that is only accessible via a VPN.

    Now, is it unnecessary? Sure, but then so is running Jellyfin or lighting a scented candle.






  • I’m still thinking on more that I can add.

    Do you listen to podcasts? I’ve started self-hosting Pinepods recently, and rediscovered the value of podcasts when I’m doing chores. Audiobookshelf is another option, but I’ve found it to be more suited for audiobooks, which I believe Jellyfin also supports.

    Since you mentioned RSS readers, I’ve tried out both Miniflux, and FreshRSS. As you mentioned in another comment, Miniflux is more lightweight, but it is also more opinionated, so I suggested checking out both of them.

    One example that comes to mind is that Miniflux removes entries from your feed if you mark them as read. This is less of an issue if it aligns with how you naturally consume RSS or if you use an external client.

    With both FreshRSS and Miniflux, I’ve been more tempted by other desktop/mobile clients than by the web UI, so now I’m using Miniflux with Capy Reader on Android. Still checking out desktop options.

    A bookmark manager could also be an idea, unless you already have a way to sync your bookmarks. I’m self-hosting Linkwarden, but I’m not that happy with the UI or with the extensions for it, so I’m still looking for the holy grail of bookmarks.

    How are you getting the music for your Navidrome server? Have you already built a solid music collection or are you using something like Lidarr or Soulseek?

    P. S. I love seeing these Glance homepages. I didn’t get the time to tinker with Glance yet, but the more screenshots I see, the more curious and excited I am about it!