• 0 Posts
  • 21 Comments
Joined 6 months ago
cake
Cake day: February 2nd, 2026

help-circle


  • I’ve started working on something very similar ( Client -> Wireguard -> homeserver -> Mullvad -> Internet), but didn’t get too far and saved the project for later. IIRC, I had issues defining more clearly in the post-up / post-down hooks which traffic was supposed to go where. Upon bringing up the tunnel to Mullvad, I’d lose SSH access instantaneously. I’ll watch this thread closely and contribute once I get around to tackle the issue sometime this summer.





  • //Edit: terminology improvements

    One per service. Not just because it’s easy, but because it allows you to minimise blast radius. If you’re running one DB DBMS per container service and one container gets compromised, only that one DB DBMS is compromised. With one centralised DB DBMS for all containers, a breach of one container means access to the data of all containers that use this without the need for any lateral movement.