The only two important columns are “Local address: port” and “process”. The later is what process is listening whille the former is the interface that process is listening on and the port.

So you see that I don’t have any process listening on any port other than 80 and 443 iin the host and the regular ones.

That said, you containers will still listen on the ports you want but only on a virtual network interface.

Basically you only need to publish ports 80 amd 443 on the container or pod you have your reverse proxy on. Other containers need to only be attached to the same network as you already did.

It is good you have solved you initial issue. However, as you say, your rules are too permissive. You should not publish ports from containers to the host. Your container ports should only be accessible over reverse-proxy network. Said otherwise <my domain>:3000 should not resolve to anything.

This can be simply acheive by not publishing any port on your service containers.

Here is an example of my VPS:

Exposed ports:

$ ss -ntlp
State                Recv-Q               Send-Q                             Local Address:Port                             Peer Address:Port              Process                                                  
LISTEN               0                    128                                      0.0.0.0:22                                    0.0.0.0:*                  users:(("sshd",pid=4084094,fd=3))                       
LISTEN               0                    4096                                     0.0.0.0:443                                   0.0.0.0:*                  users:(("conmon",pid=3436659,fd=6))                     
LISTEN               0                    4096                                     0.0.0.0:5355                                  0.0.0.0:*                  users:(("systemd-resolve",pid=723,fd=11))               
LISTEN               0                    4096                                     0.0.0.0:80                                    0.0.0.0:*                  users:(("conmon",pid=3436659,fd=5))                     
LISTEN               0                    4096                                  127.0.0.54:53                                    0.0.0.0:*                  users:(("systemd-resolve",pid=723,fd=19))               
LISTEN               0                    4096                               127.0.0.53%lo:53                                    0.0.0.0:*                  users:(("systemd-resolve",pid=723,fd=17))  

Redacted list of containers:

$ podman container ls
CONTAINER ID  IMAGE                                        COMMAND               CREATED        STATUS                 PORTS                                     NAMES
[...]
docker.io/tootsuite/mastodon-streaming:v4.3  node ./streaming      2 months ago   Up 2 months (healthy)                                            social_streaming
docker.io/eqalpha/keydb:alpine               keydb-server /etc...  2 months ago   Up 2 months (healthy)                                            cloud_cache
localhost/podman-pause:4.4.1-1111111111                            2 months ago   Up 2 months            0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp  1111111111-infra
docker.io/library/traefik:3.2                traefik               2 months ago   Up 2 months            0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp  traefik
docker.io/library/nginx:1.27-alpine          nginx -g daemon o...  3 weeks ago    Up 3 weeks                                                       cloud_web
docker.io/library/nginx:1.27-alpine          nginx -g daemon o...  3 weeks ago    Up 3 weeks                                                       social_front
[...]

You can use a black theme. Look at gnome-look.org

You can also reverse engineer them to look how they make the theme blank and apply it to adwaita. This is not complicated as themes are mostly CSS.

Edit to add that you can chat with people from open deskttop (gnome look) to ask your question: https://chat.opendesktop.org/#/welcome

Seems like you have a permissions issue. I just tested it on Fedora workstation gnome, run it from regular menu, then it asked me for password. You, you have a permission denied isssue, so you need to figure out how to run it as root.

They get better everyday. You will use them at some point if you cannot find your software via your favorite package manager.

Great to hear it is a good drop-in replacement. I’ve been using KeyDB, but seeing valkey is more actif, I may endup using it too.

I cannot reproduce it, I just tried to copy some files with various methods but they always end up correctly named. The only difference is that I have Btrfs. I never encountered this issue when I was using ext4 though.

Seems to be a Pixelfed instance.

I don’t know how to contact them but they put the URL for https://milpamerica.org/ wrong. It has an accent. Such a missed opportunity to promote it.

Never noticed that? How do you copy them, from terminal? What software do you use? What file system do you use?

There are 2 kinds of distributes. One that are on customization side and those on stability side.

For example Debian, Fedora, and arguably Arch are on stability side. They are intended for people that want things to work predictably and software to be packaged and shipped as the developer intended it. Customization or lack of it is up to the user.

Distributions like Manjaro, Zorin OS, Elementary OS, LMDE or even Linux XP are have a given goal to a pqr5icular customization. Either a set of tweaks, a particular look or even their own desktop environment or set of software they develop themselves.

This means that the first kind would have the most boring update, as they just ship new and correctly integrated software. Wwhilr the second kind would provide very nice customizations or patching of their own to their environment.

Generally, when things work on windows, it is the effort of whomever made the device or software. Microsoft generally does not develop drivers. However, when things work on GNU/Linux it is the effort of GNU, Linux, or the community. The manufacturer probably did nothing. This simply explains why we are generally relaxed or “give Linux too much benefit of the doubt relative to the “things that just work””.

So fairly comparing a Linux distro to raw windows, Linux is better. When you install a distro, things just work, when you install windows, most stuff do not work and you need to complete setup. Unless you use tools provided by the manufacturer, but then again, it is same story.

Not really weired. For example, a keyboard has a firmware. 99% of keyboards have no way of it being updated or changed. It is part of its electronics. So not a big deal. But, if a keyboard has a way to update the firmware or install another one, then it should be FOSS.

I tried this in the past and it does not seem a good option. Letting a smartphone record 24/7 would make it melt maybe.

Their code repository is still active. So worth giving a look.

Thanks. this opens up more devices to choose from. So products like hikvison are a candidate for me now.

What hardware is it compatible with?

Yes I may, I don’t have it setup now, but I do have an ultra PC that might run it.

It would be best if I don’t have to create an account or install a proprietary app to perform the initial setup.

I still haven’t found any AMCrest camera being sold near me. I found some Hikvison.

I made some reasearch for avalable hardawar near me and found this one Hikvison DS-2CD1053G0-I

I’ll keep looking for ones that are more inside friendly.

Many thanks!