Homelab Setup Guide - Proxmox / TrueNAS / Docker Services

День тому

!!!Resources, Timestamps, Extra Useful Notes and other thing I forgot to mention Below!!!
--------------------
In this mini-course I try to demystify the whole process of setting up a server at home, set it up as a NAS and run local services on it.
This course covers:
- Recommended hardware
- Installation Proxmox and TrueNAS
- Running services with Docker and Portainer Stacks (docker-compose)
This video is for entertainment purposes only.
Some aspects/topics might change in future updates.
Not everything is 100% correctly explained or information is left out. This is done to get the point across and keep everything accessible for newcomers.
--------------------
Prerequisites:
- you have a device able to run proxmox
- you have an other device to access web-interfaces
- you know your public IP-address. It is recommended that this is static.
- you know how to open ports
- recommended: have a domain name.
--------------------
Extra Notes:
-- will be added if I forgot something --
1. When setting up TrueNAS, for safety, it might be useful to have a look at Data Protection. I recommend to run a scrub test, snapshot and do a long smart test once a month for all drives/datapools.
2. Portainer agent is used to connect to a docker socket on another vm/lxc. This means you will only need to install portainer once to manage all virtual environments.
3. Latest Ryzen processors now come with integrated graphics.
4. Since OnlyOffice 7.2 JWT is enabled by default. It is recommended to use this for safety. Surf to the website link of onlyoffice and run the command in the vm shell. This secret key can than be used when connection to OnlyOffice in nextcloud. Or set a environment variable like in my updated boilerplate.
--------------------
Resources:
My docker boilerplates: github.com/MatthiasBenaets/bo...
My personal notes for my home network: github.com/MatthiasBenaets/bo...
--------------------
Timestamps:
0:00:00 Introduction
0:03:48 Hardware
0:16:00 Software overview
0:19:36 Proxmox installation
0:37:00 TrueNAS installation / Virtual Machine creation
0:52:55 Passthrough to VM
1:05:33 TrueNAS setup
1:24:30 Container creation
1:30:55 Docker
1:34:40 Portainer
1:37:50 Docker compose services
1:38:30 Pi-hole
1:49:19 Wireguard
2:02:15 Nginx Proxy Manager
2:08:58 Nextcloud and OnlyOffice
2:28:18 Nginx Website
--------------------
Enjoyed the course and want to tip? www.paypal.com/donate/?hosted...

КОМЕНТАРІ: 100

@chokolokoloko Рік тому

Hi Matthias, why I just found your video is beyond me, as I have been struggling with all these topics separately the last few weeks. Turns out all the answers were already here! Currently following this amazingly well put together guide, thank you so much for this.

@matthiasbenaets Рік тому

Thanks! Glad you found it informative

@rashedsalah7080 11 місяців тому

Same here thanks alot for this great guide, it’s the best starting point for any beginner. I hope there well be part 2 related to security

@rafaelprosdocimo2674 26 днів тому

Man, the amount of times I have searched this exact title... Thank you so much for the content!

@hamzncheese Рік тому

Thank you very much for putting this guide together! I feel like I can finally get a jump up to speed with everything else now because of Homelab setup guide.

@GunterLuyten 11 місяців тому

Great and comprehensive guide, thanks a lot Matthias!

@pablogc2008 4 місяці тому

Amazing guide my friend. Thank you so much.

@VincentGroenewold 2 місяці тому

Absolutely fantastic, saved me from some guides by influencers that just gave the wrong advice. Thanks!

@kexec. Рік тому

It's one of the best tutorial for homebrew solution

@dhimasprajaya8450 8 місяців тому

This is INSANE. Thank you so much for making this video! You're a lifesaver!!!!!!!

@l0gic23 3 місяці тому

Incredibke community contribution. Thank you

@rraymakers Рік тому

the network stack in Docker as very informative. Going to use that in my home lab, and will integrate Unbound into it. and maybe VaultWarden

@AmrShalabyofficial 5 місяців тому

thanks from egypt i learn alot and do it in my server, thanks

@kishor5389 10 місяців тому

Plz make more Homelab vids 😭 This was such a good guideeeee

@pegasusred8048 Рік тому

You sir do not understand how much I appreciate this video. The amount of effort you have put into creating this tutorial is beyond the thumbs up button, the subscribe, and commenting my appreciation. I hope you are able to continue this and I will support this kind of content as much as I can. I am so glad to see this, made my year. You sir are the GOAT!!!!!

@matthiasbenaets Рік тому

Thank you very much 😃

@eichwo Рік тому

@HiltonMundell Рік тому

Great video, thank you

@mohammedrishad9399 Рік тому

Usefull vedio, very nicely explained

@tomdeu79 25 днів тому

very funny video! i laughed very hard! Thank you for this entertainment! Keep on going!

@lukesweigart271 Рік тому

Matthias, you came on my youtube autoplay literally while I was finishing up the build for my server. I'd been planning to do a Proxmox / TrueNas build with nearly all the services you showed off here. This has been beyond valuable. And your ability to navigate all these intalls and configs essenatially live without any major hickups is extremely impressive. Thanks so much.

@matthiasbenaets Рік тому

Thanks for the compliment Luke!

@kristof9497 9 місяців тому

Thank you.

@luigitech3169 9 місяців тому

Interesting setup thanks for sharing. Proxmox + Truenas are too much for my minipc RAM I do similar things with Debian 12 + Portainer + docker compose + Traefik reverse proxy

@satysin630 Рік тому

Wow Matthias! I was doing a little research on NixOS and come across your NixOS video and this one, amazing stuff. Kinda funny to see some cycling videos on your channel and then bam two of the best videos on UKposts for NixOS and Homelabs 😁

@matthiasbenaets Рік тому

What can I say, I make videos about things I enjoy. Trying to inspire others. Thanks!

@gymdis Рік тому

@@matthiasbenaets Hi! I also found this via your NixOS video. Have you performed any experiments on running a NAS using NixOS?

@matthiasbenaets Рік тому

@@gymdis Hi Chris. To be honest, no. If you are planning on purely using NixOS as a NAS, I guess it a viable options. Especially since it supports ZFS, and it will be easy to manage datasets, user and shares. But I haven't look into it too much, so I'm not sure if you can fully configure and declare everything as easily as with something like the TrueNAS WebUI. In my situation/opinion, it's definitely not an alternative for the proxmox and truenas combo. Also for running services, I would only trust software packaged by the maintainer itself, or if there is a flake available. (i've learned this the hard way about a year ago with some critical services that ran on NixOS stable that were unusable for a week without a fix and with a custom janky overlay). Since setting up a storage solution isn't an activity that I do daily, weekly or even yearly, I don't see an advantage in investing time into creating such a config. Especially since pools are easy to migrate and making a backup of the truenas install or the general settings takes no time.

@gymdis Рік тому

@@matthiasbenaets Thank you for your thoughtful answer Matthias! Being fairly new to NixOS, the concept it presents is quite enticing. Being able to shrink down the system setup to a small collection of text files to save storage space for backups isn't really a concern though when running a NAS machine with many terabytes of space. Ease of use may be more important. "Taming" some software to work well on Nix isn't straight forward. But having a declarative configuration allows one to leave inline comments concerning why something was configured a certain way, which is maybe even more useful for storage solutions one doesn't touch very often. Really needs to have flakes enabled and be under version control though to maintain uptime as you unfortunately experienced.

@matthiasbenaets Рік тому

@@gymdis I concur!

@AdmV0rl0n Рік тому

You put a lot of work into this and deserve more views. My personal way of doing stuff at home now is in fact to not expose much anymore. Its just too hard and tiresome to work on security around these services (or any services). So in my own things, I place wireguard VPN - and don't expose other ports and things. VPN in, use the services. In its own way it simplifies a fair amount. This is less nice if you want to share things, or give more to users, but equally, you can choose to allow them VPN access.. Still appreciate all the stuff here, really good video.

@matthiasbenaets Рік тому

Thanks for the kind words! If security is a high priority, a VPN is indeed a safe bet. Personally I also only make a few things available over the internet. Something like basic auth or a service like Authalia with 2FA can make it pretty robust as well imo.

@cbaymac 2 місяці тому

Creat video. Thanks for sharing. I hit the subscribe button. Woud a container solution like NextCloud work as well?

@chromerims 21 день тому

Surpassing video 👍 1:04:11 -- qm set 100 -iscsiXX /dev/disk/by-id/devicenameZZ for passing through a storage device directly to VM 100 45:19 and 1:18:04 -- Async IO options: default (io_uring), io_uring, native, threads . . . I shall have to try these.

@DarrolKHarris Рік тому

ryzen pro cpu's work with ecc ram

@klaaskeesrand Рік тому

HELEMAAL MOOIE DINGEN! hoorde het drekt aant accent :p

@Naruu13 Рік тому

Hello Mathias, Great instructional video, it was easy to follow and easy to understand. Question though, are you able to have Truenas Scale run SMART tests while it is virtualized? I am able to run SMART tests on the hypervisor (Proxmox) but not on the VM itself. Thanks

@matthiasbenaets Рік тому

thanks and yes, pass through the sata controller or an hba and smart test work just fine.

@Naruu13 Рік тому

@@matthiasbenaets Thank you for confirming.

@relax427 Рік тому

Hi Matthias, first off, thank you so much for this video. It is beyond helpful, and has let me get my homelab up and running. When I attempt to compose the nginx proxy manager I get errors that the ports are already in use. Pihole has some of the same port settings. Ports 80 and 443 are used by both. How would you fix this? edit: I fixed this by running in a different lxc (different ip) so there were no port conflicts, would still be interested to know how to run it in same lxc as pihole.

@matthiasbenaets Рік тому

Yeah, you can't really remap these ports cause they are used for the http(s) protocol. I'd just use separate machines/vm for these two services.

@StephenJames2027 Рік тому

Great video! How did you solve the copy/paste problem between your home computer and the Proxmox console?

@matthiasbenaets Рік тому

In the webui copy paste (to my knowledge) only work with the proxmox and lxc shells, not normal vm's. Just use the normal ctrl+shift+v (or just middle mouse on linux). For general vm's I recommend just using ssh.

@hoteny Рік тому

20:35 ventoy my love

@starboardaussie 10 місяців тому

@redpillaussie9441 Great video Mathias - Do you have any tips on best method and practices (and the most secure) to remote connect to the Proxmox VE Server Web console UI without connection through some sort of central pipe, like VPN or Cloudflare or such. I want to connect to my Proxmox Web UI remotely as I travel a lot and don't want messy subscriptions either.

@buccellamarcoo Рік тому

I was looking at such type of configuration for my setup, thank you for sharing this video, help a lot. One question about the container creation, why don’t create it using the disk inside the NAS instead of local. In that way the container and docker would have some kind of redundancy in case of failure. What do you think?

@matthiasbenaets Рік тому

Hi Marco, I assume you mean docker containers (not lxc). So for my current setup i have it like this: proxmox installed on nvme 128gb with truenas in local-lvm. All my lxc containers are stored on a second nvme 128gb. This already separated them from the boot drive. The lxc containers (and thus the docker containers) have a frequent backup to my truenas zfs pool for added redundancy as you mentioned. Now for docker containers that need to always have the latest data backed up, I just set up a cron job to rsync to a very small striped pool on a slow spinning disk. I guess to make it fully redundant I might also need to set something like this up for the cloud, but haven't had any time to figure that out.

@Ammarsays Рік тому

I have a workstation laptop with three disks. Two nvme and one hdd. Can anyone please suggest me a storage setup for home server? Should I install proxmox on one disk and create a ZFS pool for the remaining two?

@skrillzplayz9092 7 місяців тому

Hi Matthias, amazing tutorial to begin with however I have been losing my mind a bit trying to get IOMMU to work. I should have it on my r5 3600, asrock b550m steel legend should I not? I have updated bios, done all the file edits on this tutorial, rebooted etc.

@matthiasbenaets 7 місяців тому

The b550 chipset isn't really ideal for this, but it should work (but the grouping might be a bit strange). I recommend that you go over the official wiki page for pci passthrough, it might be insightful. If I'd had to guess, it's probably just a setting in the bios that is either not enabled or not specifically set to enabled (not auto). Just check that SVM is enabled. On some board you migh also need to enable iommu via de nbio options under AMD CBS.

@skrillzplayz9092 7 місяців тому

Thanks @@matthiasbenaets ! It was hidden under the AMD CBS options. I was aware that b550 isnt ideal but I had most components laying around from previous upgrades and in need of a home server.

@virtualnk5825 4 місяці тому

Hey Matthias, thank you so much for the video, if it wasn't for this I would have probably taken much much longer to figure this all out on my own. I'm done setting up Wireguard but I'm a bit lost on how to connect a PC to it. The readme gives me a hint of how to do it but I just don't know if I should recreate the container with the peers info (private/public keys) or if I can just edit that into the config file on the server.

@matthiasbenaets 4 місяці тому

Thanks, glad to hear! I have to be honest. I haven't messed with wireguard for a while. It's something you set up and forget about (even when you use it daily). So it has been a while since i messed with the container. If i can recall correctly, the easiest way was to edit the compose file (adding a peer) and just rebuilding the container. With the docker container, I created a persistent volume where all the configs were stored and easily accessible. to connect to a PC, i pretty much just copy the .conf file (not messing with the keys). In the official gui application you can just use that. If you are using the cli tool, just follow the official guide and use the keys. if you are using a 3rd party tool, I can't really help, but you will probably just have to fill out the content of the keys as well. Note that with VPNs there are many variables that can mess with a valid connection, ip, dns, firewall, ip forwarding, etc. etc..., so you need some knowledge to get it actually running. Not something i can really all explain in a YT comment, but best of luck.

@virtualnk5825 4 місяці тому

@@matthiasbenaets oh man thanks for the quick reply, just as an update: I managed to understand how to copy the conf file from the remote, I didn't get at first that the scp command was to be run on the proxmox instance, then to copy stuff you need to log in either with an SSH key or the root user (which is disabled by default), then using the conf file on wireguard was actually easier than I thought. Now, I can't seem to create an nginx container because port 443 is already allocated (I guess I can't have both PiHole and nginx running on the same VM?)

@matthiasbenaets 4 місяці тому

@@virtualnk5825 great, an yes you are correct pinhole already uses 80 and 443 since you are routing all your traffic through it.

@virtualnk5825 4 місяці тому

@@matthiasbenaets one last question if I may, would you or anyone know why our Pihole's memory usage is so high? I have added more ram to the debian container and in Proxmox it shows that it's not taking more than 25% memory, PiHole shows 83.2% and in the video it's also at something like 76%. My guess is that PiHole sees the mem usage accross the whole server? (at this point I only have wireguard installed on this container, so TrueNAS is the only thing that could affect it)

@matthiasbenaets 4 місяці тому

@@virtualnk5825 I think it's just a side effect of being containerized. I never had any issues with memory. memory is memory, if it needs more, it will be allocated, yet it will also take as much as possible for caching but will be freed up if needed.

@huubclaassen4342 11 місяців тому

Hi Matthias, thank you for the effort in making this video. It is most helpful for me. However I'm struggling with one part. I.m building my cloud lxc container. First i created a unprivileged container but then i couldn't mount my truenas share. After reading your notes i saw i had to create a privaliged container, and although te nesting option is checked but greyed out i can't install docker containers. this gives me an error. Can you tell me what i do wrong?

@matthiasbenaets 11 місяців тому

When creating a privileges container it indeed checks nesting but it's greyed out. So it probably is no longer enabled. Open the VM's options, and under features enable it again. If you want to use Shares aswell, maybe also enable smb/cifs. If you still receive errors, it might be due to a lxc from a distro that need extra steps. For me debian pretty much always works.

@huubclaassen4342 11 місяців тому

@@matthiasbenaets thnx for the quick response and help that did it. Enjoyed following your video!

@lakshya238 7 місяців тому

Great video, l loved how you went step-by-step, however, I am having trouble accessing the Pi-hole as you explained in the timestamp: 1:44:00, can you please advise how to access it? Again thank you so much for this great video.

@matthiasbenaets 7 місяців тому

it depends when your behind a proxy manager or not and if it's your dns or not. normally it in subdirectory /admin so: /admin . if it goes to a blank website afterwards just load the ip address.

@lakshya238 7 місяців тому

@@matthiasbenaets I was finally able to access it using the same IP as Portainer with /admin on it. Thank you for your help. My next question is since I have specific hardware running Pfsense which hands out DHCP and DNS. So for example my SOHO looks like Internet>Pfsesne>switch>my devices, server(Proxmox). In this cases how would you set up pi-hole? Again thank you for all your help.

@matthiasbenaets 7 місяців тому

@@lakshya238 Personally I would set up pihole on the pfsense box (if possible, not sure, I only know opnsense which has a plugin). If it's on another machine, give that machine a static ip in pfsense or work with ddns, and point the dns server address to the pihole machine.

@lakshya238 7 місяців тому

@@matthiasbenaets I see and agree; however, the problem I am facing is Docker is assigning its own IP (172.x.x.x) with its own DHCP which is a pain because I really do not how to assign IP to these containers and get them working. Please advise if you know what should I do.

@TechShogun Рік тому

great video, I have one issue when i try to install pi-hole i get port 53 in use any idea on how to fix that ?

@matthiasbenaets Рік тому

Probably due to pi-hole not being able to bind to port 53. Check the vm if port 53 is already being used with $ sudo lsof -i :53 . I believe some linux distros come with their own resolver, which is not ideal. You can disable the service, but depending on the disto, this can cause issues. Especially with Ubuntu I believe you will have to add a couple more lines to the docker-compose file, but for that I'll refer you to the docker-pi-hole github page.

@mazchen Рік тому

Backing up a container/VM is easy. But how do you backup the proxmox host?

@matthiasbenaets Рік тому

Running a Proxmox cluster with high availability is one option, this makes sure that nothing is lost when one node goes down. This also means you don't really need to back anything up. Another option is to set up a Proxmox backup server, this way you can back up a complete node all at once. I believe it also has a few more options than just backup up individual vms to a separate storage location. I guess installing Proxmox on a mirrored ZFS is also an option.

@alesvojacek7303 Рік тому

How do you backup your proxmox machine, to restore it as fast as possible if proxmox boot disk dies? What are you saying to Ceph instead of TrueNas?

@matthiasbenaets Рік тому

Well having a cluster set is indeed ideal. For home use with less infrastructure it depends. There are many options available. You can always just set up a Proxmox backup server and import the complete node after reinstall after adding it as a storage option. You can use TrueNas in this case, but if are good with the command line, you can also just set up a ZFS pool within proxmox with a couple extra drives. After a reinstall you can simply just search for the pool, import it, and restore all vm's.

@balla2172 Рік тому

Why plex vs jellyfin?

@haithammaged987 Рік тому

very useful for me have not any home lab XD

@yashgaur1094 2 місяці тому

Which hypervisor you have used to install proxmox on a single machine

@matthiasbenaets 2 місяці тому

QEMU/KVM

@BIGNEAL Рік тому

What are the specs of you machine? Awesome video btw.

@matthiasbenaets Рік тому

Thanks! Nothing special due to budget constraints, ryzen 9 5900x (12c/24t), 64GB ECC RAM, 250GB boot nvme, 2x1.6TB SATA SSD (mirrored for vm's) and 3x8TB HDD (raidz for proxmox backups and general storage), RX580 for passthrough for adobe cc. A few more cores, ram would be great. Also maybe a SAS HBA and 10G NIC would be useful in the future. But you can already do a lot with way less then this.

@BIGNEAL Рік тому

@@matthiasbenaets Sweet I have 32gb of RAM and Ryzen 7 so I’m been debating about upgrading

@Lindomar850 10 місяців тому

friend can't install vm on supermicro x9dbl-if 2x e5-2470v2 not add 20 cores,40 threads vm, The product of vCPUs, cores and threads must not exceed 255 on this system. truenas scale, do you have an idea? thanks!

@matthiasbenaets 10 місяців тому

try allocating less cores to the vm. 20cx40tx1cpu=800 vCPUs.

@businessgoose3725 2 місяці тому

Hey man, im running into an issue with Pihole and NPM. They are fighting over the port 443. Any advice? - Solved along with some other issues, ill post my solutions in this thread if interested!

@businessgoose3725 2 місяці тому

If anyone is having this issue, change the ports on pihole to 8080:80 and 4443:443

@businessgoose3725 2 місяці тому

If you are having an issue w/ NPM reaching your proxmox installation and throwing 401, it's because of the certs. Navigate to /etc/pve/local in your PVE installation and grab the .pem and .key files. A simple cat and copy/paste to your desktop is fine. Then navigate to SSL Certs in NPM and add custom certs using the files you just grabbed. Then navigate back to proxy hosts and assign the SSL cert you just created to your proxmox proxy host! Should work now!

@virtualnk5825 4 місяці тому

I did all the setup with PiHole, I added my PiHole's address as my local DNS-Server on my Router (I didn't change it on my PC as you did in the video), I did the setup with NGINX (had to run it in a separate LXC container, added it to portainer agent by adding a new enviroment on Portainer) added "port.lan" exactly as you did in nginx, PiHole's DNS record has the domain "port.lan" pointed at my nginx ip address but once I try to access "port.lan" nothing happens (can't find the site). Any ideas?

@matthiasbenaets 4 місяці тому

This is impossible to say. I cannot help you with this, sorry. It mostly depends on your personal devices, setups and config. More likely than not, this is just dns or ip leaking, either with your pc or with your router (and only if your setup is actually correct). To start debugging this, you should first disable ipv6 on your pc and directly use the dns of pihole. if you have a pihole dns record for port.lan pointing to npm, and a proxy host to the correct ip:port on npm, it should work. if it does, you should evaluate the network traffic using something like traceroute. If it does not work, check your record and check if the ip's are actually correct.

@virtualnk5825 4 місяці тому

@@matthiasbenaets hey I resolved the issue by installing pihole on an LXC container (without docker) and it's now working super smooth, only thing I'm having a hard time with is getting the reverse proxy with nginx and pihole's address with the /admin at the end. Thank you again for the help and Merry Christmas!

@anteln Рік тому

Just in case… you show the password used for the web access for your main instance of pihole. Incase that was a ”real” password it is now compromised. FYI.

@matthiasbenaets Рік тому

hehe good catch, luckily I only used it for like 2 or 3 locally hosted services that require only a password. Everything public or requiring a full login I use vaultwarden. I do appreciate the heads up though!

@zero7dd 10 місяців тому

Hello, great video. could you do a tutorial on Setting up from scratch all the way to the end of how to create an Nginx Website and also Nginx Proxy Manager to get it hosted online?

@InSaiyan-Shinobi Рік тому

I’m having the same issue your friend is having I’m trying to figure out how to use proxmox truenas and make automated media server with jellyfin definitely a lot more complex then I thought. If any one in the comment section is willing to help me plzzz let me know I have a discord. 😂

@Theely Рік тому

How do I get Proxmox dark mode? 😳

@xmesaj2 Рік тому

browser addon: Dark Reader

@TheEricDangerous Рік тому

What is the point of presenting hardware with details on the importance of ram ecc at the beginning of the video, if it is to realize the installation of proxmox in virtual (vda) and not in baremetal that avoids a useless encapsulation and greedy in resources ? It's probably because I'm too old or too stupid

@matthiasbenaets Рік тому

The initial install in vm is purely because I don't have a system available nor am able to capture the video output while doing it. For a video, this is more user friendly to follow. I never recommend visualizing proxmox unless it's in proxmox itself for testing reasons. Proxmox is type 1 hypervisor ie bare mental hyprvisor.

@Wordsm1th Рік тому

Your video started great, but gradually you seemed to assume far too much. A more comprehensive tutorial with exact steps from portainer onwards would be helpful. For example, when you showed us how to set up a truenas share with Nextcloud, you failed to show us how to get the uid. You also assumed that the portainer setup went without hiccups, but it didn't. It would help if you informed us that we needed an account for portainer and could use only five nodes for free. As already stated, the amount of effort put into the first half of the video was superb. I do not usually comment, but after wasting time trying to work around what you started, it was only fair that I said something. I ended up building Nextcloud on an Ubuntu server on promox by watching a learnlinux tv tutorial.

@matthiasbenaets Рік тому

Hi, Thanks for the feedback. I tried to fit as much info as possible in as little time as possible. My aim in these guides is not a hand-holding experience rather a teaching one. uid's and such are just one google search away and this is not a Linux tutorial. All the services presented here are some you and others might find useful in their homelab, that does not mean all of them will have a full blown tutorial but rather some tip and trick, especially since not everyone will use them. Care to elaborate on the portainer and nextcloud issue? I can't recall that you need an extra account for portainer, unless you want to use the EE version (which again, is not really too relevant for starting out). If you're only issue with nextcloud was mounting of the smb in the lxc, you could have also used the Dockerfile instead (from the github repo), this will install nextcloud with the needed samba packages. Alternatively you can also just install them manually in the docker container. The smb option should then become available. My method maybe wasn't too clear since the uid might not be the same depending on the vm/lxc used, but this way it does not require people to learn how to use custom dockerfiles or run the same commands every time you pull the latest image. If you don't understand the usage, here's a quick explanation as to why it's uid 33. The persistent data generated by the nextcloud container is made by user "www-data" (atleast in my case). To prevent any future permission issues, I mount the smb shares as this user. To find this uid and gid I can simply run $ id -u www-data, or with flag -g for group.

@DevilDriver665 Рік тому

Great vid, thx - one question: since you are using nextcloud and onlyoffice exposed to the internet why don't you use a jwt token for onlyoffice?

@matthiasbenaets Рік тому

hi, thanks for the kind words. I did not go into this futher because imo it's only relevant for people who want to access it over the internet. This is only 1 out of 3 possible scenarios, the other being using a local ip or setting up the container with the pihole network and using a local dns. In most situations both of these don't need the extra security. You did remind me to re-enable this for my personal setup so thanks! Of course this is highly recommended when making it available to the internet. For anyone else intrested and reading this, I'll add a short explanation in the description under notes.