• 3 Posts
  • 65 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle


  • From what I heard is that the NPM project only has 1 developer and so they can’t really respond and fix security flaws in a proper timeframe.

    It’s mostly just nginx with a webui. You can even see the nginx config files if you bash into the container. It has the same bugs as upstream nginx. Do not expose the management port to the internet.

    Plus compared to normal nginx, it’s harder to misconfigure it. Most of my services are just the default config, so I can’t mess it up accidentally.

    About lockouts: Once also happened me, but that was just a messed up update, next update fixed itself. If you lock yourself out you can usually edit the db directly, it defaults to sqlite, but I used it with mariadb.


















  • Yeah, that’s what you put in a compose file, and you shouldn’t care about anything else, port mappings can be read from the Dockerfile if it’s not documented, and if the container was built correctly you shouldn’t care about config files.

    I never met a container with 0 documentation. You can read the Doockerfile at least, it’s not magic.

    I mean, I can understand why someone want to use HAOS and neber deal with such things, but if someone can set up HA in a container, the second and third container from there is not an unbelivably big step.