I ran swarm in a homelab and ended up switching back. I don’t remember all the details I had issues with, but be aware of quorum. Here is the link to high availability docs. If one of the nodes goes down then you can’t do anything with the other. I also had issues getting everyone back online when one went down (with only two). I had three nodes, but one failed and I didn’t replace it. If one of the remaining two went offline I had to manually setup the swarm again each time. I found it to be a hassle because I didn’t have enough need for multiple nodes and high availability.

I now use Pangolin (Underlying traefik) on a VPS which VPNs back into my home where I host the sites. I have the VPN on it’s own proxmox container in the same VLAN as my servers.

See if you have a microcenter near you. Not sure about delivery though, but I love that place.

I like to call it “bigot chicken”, but yours is more alliterative.

Can’t speak to how difficult it would be to do after the fact. My guess is just adding in the lines in the docker compose. As for CrowdSec, it seems to run in the background and I haven’t looked at it much. I’ve triggered it a few times and locked myself out. So I’ve added my home IP to the whitelist (it’s running on a VPS). It also locked out my uptime Kuma so I whitelisted that too.

New California Republic (or NCR for short)

I’ve migrated about half of my services off of cloudflare DNS proxy. Guess which half still worked this afternoon. (Self hosting pangolin with CrowdSec as replacement). I wasn’t even using the cloudflare tunnel. Just their proxy for some bot mitigation.

This is 100% my experience and setup. (Though I run Debian for my docker VM)

I did run docker in an LXC but ran into some weird permission issues that shouldn’t have existed. Ran it again in VM and no issues with the same setup. Decided to keep it that way.

I do run my plex and jellyfin on an LXC tough. No issues with that so far.

That was one of the things I got wrong at first as well. But it totally makes it much easier in the long run.

I have proxmox on bare metal, an HBA card to passthrough to TrueNAS Scale. I’ve had good luck with this setup.

The HBA card is to passthrough to TrueNAS so it can get direct control of the drives for ZFS. I got mine on eBay.

I’m running proxmox so that I can separate some of my processes (e.g. plex LXC) into a different VM.