mark

@GregorTacTac If you use containers you can map something like 8080 on the host to 80 in the container. Generally it’s recommended to have a reverse proxy listening on 80 and 443 with all your individual applications on localhost only high ports.

@Tippon That is a big part of the point behind containers, you don’t have any long term state inside them. Migration is just a case of copying the configuration over along with the contents of any persistent volumes.

It’s worth looking into Podman instead of Docker, the daemon-less architecture makes it more lightweight and secure as it’s easier to have rootless containers. Management can also be easer as being a Red Hat project it integrates well into Systemd.

With your existing server on Xubuntu you may as well stick with Ubuntu Server or Debian for the familiarity.

@nutbutter @noride The container section is, but the rest of it is operating on the host system more like Webmin does.

@reactive_recall Those fees come from the banks and card schemes, so every processor out there is going to pass them on. The only real way around it is to accept payments by bank transfer or cheque/postal order.

@Salix Ideally you would put NPM in VM 3, so you have a single entry point separated from everything else.

@mbell You need a single source of truth to store the public keys in, then set AuthorizedKeysCommand in the SSHD config to a script that looks them up from there. I use this one for LDAP.