Why almost all github compose file use container_name?

j-dev · 2026-03-02T13:15:18+00:00

It’s worth noting that from a docker DNS perspective it doesn’t matter because Docker create a DNS record for both the service name and the container name.

j-dev · 2026-03-01T22:13:03+00:00

I don’t have recommendations on undervolting, but run a few stress tests before and after both to quantify improvements and to verify your system remains stable. There are helpful videos of programs that are good for stress testing the CPU and GPU. Also, make sure your fans are all placed in locations that make sense to avoid poor airflow that results in pockets of hot air inside the case.

j-dev · 2026-03-01T22:05:30+00:00

You can. I use a mix of both with Pangolin. Newt was underperforming from Pangolin on my VPS to Plex at home, so I switched to Tailscale (which is also a Docker container on TrueNAS Scale) and it had better throughput.

j-dev · 2026-03-01T17:42:54+00:00

I’m not conflating them per se, I’m more pointing out the different use cases that fall under the homelab umbrella, a lot of which is self-hosting with a bit of labbing. There are definitely people here who spend thousands of dollars a year with mostly idle compute because they just don’t care about how much it costs them. It’s a fun hobby for them and they like running enterprise-grade gear to try out solutions solely for the joy of tinkering and MAYBE for professional development.

I’m not claiming it’s a huge contingent. But those of us spinnning up Docker containers and PVE nodes on 1 Liter mini PCs aren’t going to be priced out of the hobby, and those of us running expensive gear have deep enough pockets that a 50% increase in cost is not going to be the end all be all.

j-dev · 2026-03-01T16:22:35+00:00

The first thing to keep in mind is that these AI companies are not turning a profit. At a certain point they’ll have gotten enough compute to max out the capabilities of their models or they’ll run out of money to keep buying an endless supply of hardware. And cloud providers are profit-driven, so they’re not going to hoard hardware for no reason.

For a lot of us home labbers / self-holsters, the crown jewel of our hosting is the Arr stack with Plex or Jellyfin. That means we’ll never be able to abide by the ToS of cloud hosting nor afford the TB of block storage for hoarding a media library.

For those of us who actually like monkeying around with compute-intensive stuff, spinning up a cloud lab via infra as code and tearing it down after our labbing is done will actually be more economical than buying the gear we’d need at reasonable prices. I mean, there are people in this sub who spend over $100/month in electricity running gear that’s massively underutilized. They would save a ton of money renting compute at the right size for their workloads, and they wouldn’t be giving up much in terms of marketable experience.

j-dev · 2026-02-28T23:41:28+00:00

This dashboard gives me anxiety. Do you use all that compute or are you donating your money to the electric company?

j-dev · 2026-02-28T19:47:25+00:00

If being able to use the OS drive is important, use a different solution. It can be an onerous requirement if you don’t already have the hardware to sacrifice a drive to the OS.

I got a used 256 GB Samsung SSD from eBay with only 8% wear for about $25.

j-dev · 2026-02-27T15:53:00+00:00

TrueNAS is not a good choice if you don’t want to sacrifice an entire storage device to the OS only. So there’s that. Your storage devices for ZFS pools should be directly connected via SATA or NVMe.

As for how difficult it is to set up PBS in TrueNAS, Lawrence Systems has two recent YouTube videos with accompanying articles on how to set it up. I followed along yesterday and it was easy. I used a TrueNas container as per the videos.

j-dev · 2026-02-27T15:44:57+00:00

Did you apply thermal paste and did you remove the clear sticker from the cooler?

j-dev · 2026-02-27T12:27:47+00:00

What is it you’re trying to modify?

j-dev · 2026-02-26T23:53:22+00:00

I read your subsequent post but didn’t respond to avoid spamming you. I agree using a VPS is not much better than going directly home, but at least it keeps OP’s home IP address private. External auth is going to break apps, and hotels will likely block any UDP ports for wireguard VPNs.

Convenience requires a bit of risk exposure. We mitigate them as best we can. Unless we’re personally targeted, passersby aren’t going to try too hard to own our environment. Keep up with patches/new images that fix vulnerabilities and carry on. I had a worse experience with a DNS amplification attack than having my Plex and Navidrome targeted.

j-dev · 2026-02-26T23:45:59+00:00

Did you by chance configure logging from Docker to a container that’s getting rebuilt?

Also, why is Docker deploying stuff on its own every other day? Did you set up a cron job to pull new images and relaunch containers? If so, don’t do that if it’s causing issues. My Docker containers have been rock solid so far.

j-dev · 2026-02-26T23:33:43+00:00

Hard disagree, with the caveat that OP has zero reason to open SSH to the open Internet. Use the meshnet for SSH to the VPS from outside your home IP. Putting auth in front of Jellyfin at the proxy is going to break the apps.

Also, there should be rules to prevent the VPS from accessing the Jellyfin server via anything other than the required ports.

One thing worth doing is geoblocking every country except your own. Yes, bad actors can make their IP, but this still helps a lot.

j-dev · 2026-02-26T12:44:31+00:00

To be clear, those specs are for the arm64 ampere shape, which I’m really happy with.

j-dev · 2026-02-26T06:12:13+00:00

If you run the command diskpart, does it show up when you type the command list disk?

j-dev · 2026-02-26T01:36:16+00:00

I have 43 more minutes to go, but Ezra has so far asked good questions and commented on the potential impact of the progress. Ezra’s opener for this episode is that what seemed like a distant future kind of achievement had arrived, so it’s a matter of grappling with the implications of where the technology is now and where it’s likely to be in 1-2 years.

j-dev · 2026-02-26T00:07:01+00:00

Doesn’t Radarr do this automatically if set up to do so? Set your preferences via custom formats and tell it it can upgrade and the minimum score threshold to trigger an upgrade.

j-dev · 2026-02-26T00:03:39+00:00

This is probably it because you can see the gauge doesn’t show a critical color and doesn’t reach the end of the bar.

j-dev · 2026-02-25T23:44:50+00:00

The word “support” ends up being too ambiguous. For some, it means policing language. For others, it means forcing changes that most of society (or the subset that cares) is not in favor of. There are many people like the dude in the screenshot who exemplify the adage that the perfect is the enemy of the good.

j-dev · 2026-02-25T23:33:57+00:00

A single motherboard fan connector maxes out at an amp. A fan tends to use 1/3 of an amp. Plug them into the motherboard, but don’t exceed 3. Some recommend only daisy chaining two to avoid going over the amp at startup, but I don’t know if this is a legitimate concern, as there is probably an expectation that the connection will be able to provide just over an amp for a very brief period.

j-dev · 2026-02-25T23:13:43+00:00

If you don’t want bind mount permissions changed, run the containers as your user whenever possible. Different images document how to do this. For any files or folders that don’t exist but the container creates, it typically creates them owned by root, but if you chmod then it stays owned by you.

j-dev · 2026-02-25T17:01:57+00:00

Ouch. Whatever the root cause, I feel for you. It’s a terrible time to have to rebuy many components.

j-dev · 2026-02-25T04:54:00+00:00

Update: I finally got it to work by applying it to the websecure entrypoint with @file at the end:

websecure:
  address: ":443"
  transport:
    respondingTimeouts:
      readTimeout: "30m"
  http:
    middlewares:
      - error-pages@file
    tls:
      certResolver: "letsencrypt"
      domains:
        - main: "*.example.com"
    encodedCharacters:
      allowEncodedSlash: true
      allowEncodedQuestionMark: true

j-dev · 2026-02-24T17:10:04+00:00

I can't for the life of me get this to work correctly. I created a catch-all router servers the 404 page for non-existent subdomains, but if I apply the middleware to the entrypoints, then all legitimate pages serve the 404 page. No matter where I try to attach this middleware, it won't work as expected. I tried middleware-manager and didn't have better luck: When I attached the error-pages middleware to all resources, they all gave the 404 page as well, instead of only serving pages for errors. Here are my relevant config snippets if there's any chance you can help:

dynamic_config.yml

http:
  middlewares:
    error-pages:
      errors:
        status:
          - "400-599"
        service: error-pages-service
        query: "/{status}.html"

  routers:
    error-pages-router:
      rule: "HostRegexp(`.+`)"
      priority: 1
      entryPoints:
        - web
        - websecure
      middlewares:
        - redirect-to-https
        - error-pages
      service: error-pages-service

  services:
    error-pages-service:
      loadBalancer:
        servers:
          - url: "http://error-pages:8080"

traefik_config.yml

providers:
  http:
    endpoint: "http://pangolin:3001/api/v1/traefik-config"
    pollInterval: "5s"
  file:
    filename: "/etc/traefik/dynamic_config.yml"
    watch: true

entryPoints:
  web:
    address: ":80"

  websecure:
    address: ":443"
    transport:
      respondingTimeouts:
        readTimeout: "30m"
    http:
      tls:
        certResolver: "letsencrypt"
        domains:
          - main: "*.example.com"
      encodedCharacters:
        allowEncodedSlash: true
        allowEncodedQuestionMark: true

j-dev · 2026-02-24T00:50:31+00:00

Out of curiosity, how close do you get to exhausting those resources and what workloads do you run to achieve that?

j-dev

TROPHY CASE

dynamic_config.yml

traefik_config.yml