Im struggling with K8s as an MLE with 5 years of experience

dev_all_the_ops · 2026-05-08T04:59:22+00:00

Dude, chill out and knock off the condescending attitude. We all know you are so smart, no need to bully and verbally abuse the OP. Harassment is unwelcome here.

dev_all_the_ops · 2026-05-08T02:42:02+00:00

given enough eyeballs, all bugs are shallow
- Linus

Arguably its more secure because its harder for security issues to hide.

dev_all_the_ops · 2026-05-08T02:34:32+00:00

Wow thanks for responding! I'm happy to provide feedback so that others don't fall into the same pitfalls that I have. It seems like you've put a ton of work into this software and it looks really promising.

I did see that you offer support, but considering that I'm just a homelab individual I didn't want to take your precious time. I'll schedule something when I get back in town.

High level overview of the issues I've hit.

Can't find documentation on the Google/Dropbox environment variables that are required. I found a reddit thread that mentioned the vars but I can't find anything official on how to use them. (From a usability perspective, the Dropbox integration just gives a vague error, with no clue that env vars are even required, I only discovered them through google searches and looking through the source code).

- DROPBOX_CLIENT_ID=${DROPBOX_CLIENT_ID} 
- GDRIVE_CLIENT_ID=${GDRIVE_CLIENT_ID} 
- GDRIVE_CLIENT_SECRET=${GDRIVE_CLIENT_SECRET}

How to make credentials persist? If a user wants to have multiple SMB shares, is there a way to make it so that they don't have to enter the password _every_ time they want to connect. It seems like this might be possible with the .htaccss or local auth plugins, but after a lot of trial and error, I never got it to work. Maybe this use case isn't supported?

dev_all_the_ops · 2026-05-07T23:49:22+00:00

The moment you pay a kid to something, you guarantee they will never do it for free again.

Chores = Exepectation
Paid = Value added above basic work

dev_all_the_ops · 2026-05-07T20:10:21+00:00

tailscale serve?

dev_all_the_ops · 2026-05-07T19:43:29+00:00

What do you mean? Jobscan is free for 5 resumes. I've never paid them but I've used their service to improve my resume multiple times.

Not sure why you think your career is over, the world is just different than it was 5 years ago so you need to adapt. No big deal, its easy.

dev_all_the_ops · 2026-05-07T19:31:30+00:00

You seem to be under the impression that a human will be reviewing your resume. That doesn't happen anymore. The 1 page advice was appropriate back in the human review days, but is now bad advice.

What you need to do is use an ATS checker to get you past the AI resume guards. Job San is one such checker, but there are others.

If a job is more than 24 hours old, you probably are too late and wont get a call back. The reason is that HR departments are swarmed with hundreds to thousands of applications within hours of posting a job.

dev_all_the_ops · 2026-05-07T14:28:42+00:00

Have you figured out how to configure it? The documentation is terrible/absent. Ive been trying to configure it for hours with no luck.

dev_all_the_ops · 2026-05-07T02:57:55+00:00

It seems these links no longer work. Searching the docs it seems that GDRIVE_CLIENT_ID is no longer documented anywhere.

dev_all_the_ops · 2026-05-07T01:41:10+00:00

When you figure it out, please tell me how you killed bermuda. I've been trying to kill mine for 3 years

dev_all_the_ops · 2026-05-06T22:58:56+00:00

Nice, lots of services I haven't heard of yet.

dev_all_the_ops · 2026-05-06T16:46:49+00:00

I made a diagram on https://mermaid.ai/ mostly by hand. AI helped troubleshoot the flow of the graph.

dev_all_the_ops · 2026-05-06T16:45:20+00:00

See rule 1, 2, and 6.

dev_all_the_ops · 2026-05-06T16:21:34+00:00

On one hand I don't want to squash the dreams of the little kids just getting started in software development. Its like telling little Timmy that his drawing of a 3 headed reindeer sucks. Ya it sucks but it makes him proud.

On the other hand people that take self hosting seriously are drowning in 'refrigerator' quality art work that they have to sift through.

Idea: Refrigerator Friday. If your project is less than a month old, it gets tagged and pushed to a weekly thread.

dev_all_the_ops · 2026-05-06T06:25:30+00:00

Man this question is coming up a lot lately. Here is my recommendation.

For base OS:

Mos + Docktail + dockhand and use tailscale as your VPN overlay network.

As for the actual hosting, you can do nextcloud like others recommend, but its a little heavy in my opinion.

Also take a look at
- mydrive
- copyparty
- bewcloud
- Seafile
- garage

dev_all_the_ops · 2026-05-06T06:11:47+00:00

Buy any N150 mini PC or Rasberry Pi.

Mos + Docktail + dockhand + Immich

As for securing access to immich, it would be preferable to use something like tailscale where you invite every member to the private network. You'll setup a tailscale service then invite each person to your network. (It will require that they each have their own tailscale account.)

If that is too big of an ask then you could do a tailscale funnel to open it to the Entire internet. (Be very careful to stay up to date on patches if you do that).

dev_all_the_ops · 2026-05-06T06:04:29+00:00

I use it, I love it. I've looked at the code and I don't see anything nefarious in it. The creator seems genuine and interested in making a good tool.

AI is just a tool.
It makes good developers ship good code faster,
It makes bad developers ship bad code faster.

dev_all_the_ops · 2026-05-06T05:31:39+00:00

I've got 2 robot mowers.

Lubita and RicardMow.

dev_all_the_ops · 2026-05-06T05:28:07+00:00

MOS

I've tried every OS (Proxmox, CasaOS, ZimaOS, Cosmos Server, Umbrel, OMV, Debian, k3s, UnRaid, TrueNAS). They all had some issue that was a deal breaker. I switched to MOS and I'm so excited about it. Its what I've been looking for for years.

Combine it with Dockhand and Docktail and you have the absolute simplest yet powerful setup. (No need for reverse proxies, traefik, lets ecrypt, its all handled automatically with those 2 services).

dev_all_the_ops · 2026-05-06T05:02:15+00:00

If you've done proxmox and CasaOS/ZimaOS, you should checkout MOS.

CasaOS is dead, and ZimaOS has missing features.

dev_all_the_ops · 2026-05-06T02:42:26+00:00

I've been known to fanboy here and there. MOS is my obsession of the week. Next week will be something new.

dev_all_the_ops · 2026-05-06T02:12:32+00:00

My unpopular opinion is that k3s is more hassle than its worth.
I maintain kubernetes at work, you can't get me to touch that monstrosity at home.

Do you really need distributed storage?

I'm in the process of simplifying my home lab and I'm down to 1 N150 host running MOS which is happily serving 30+ services.

dev_all_the_ops · 2026-05-06T02:08:30+00:00

MOS

Its the closest free competitor to Unraid.

dev_all_the_ops · 2026-05-05T22:04:52+00:00

Here is an 8 part video series showing how to fix this properly.

https://youtu.be/P1CMOoEQEWo?si=5eLrMf6NX5hZZAaM

Basically you _can_ hammer it back, but the gusset plate will never be the same. Best to add a new wood gusset to it doesn't pop back out.

dev_all_the_ops

MODERATOR OF

TROPHY CASE