• 0 Posts
  • 72 Comments
Joined 2 years ago
cake
Cake day: June 5th, 2023

help-circle









  • Single node k3s is possible and can do what you’re asking but has some overhead (hence your acknowledgment of overkill). One thing i think it gets right and would help here is the reverse proxy service. It’s essentially a single entity with configuration of all of your endpoints in it. It’s managed programmatically so additions or changes are not needed to he done by hand. It sounds like you need a reverse proxy to terminate the TLS then ingress objects defined to route to individual containers/pods. If you try for multiple reverse proxies you will have a bad time managing all of that overhead. I strongly recommend going for a single reverse proxy setup unless you can automate the multiple proxies setup.


  • notfromhere@lemmy.onetoSelfhosted@lemmy.worldCosmos 0.12 major update
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    1 year ago

    And here I am running a bare metal k3s cluster fully managed by custom ansible playbooks with my templatized custom manifests. I definitely learned a lot going that way. This project looks like it has just about everything covered except high availability or redundancy, but maybe I missed it in the readme. Good work but definitely not for me.








  • I think VNC protocol over your tailscale tailnet would work well. It shares the screen without locking out the in-person user.

    You could also try Steam remote play, it shares the desktop like what you’re asking, but would require a bit if setup (custom “game” added which would expose the entire desktop for e.g.), and wouldn’t be useful without someone relaunching it after a reboot, so wouldn’t be very useful for remote management without grandma available at the machine.

    I would stay away from X11 over SSH because X11is deprecated in favor of Wayland and will stop working as you upgrade the OS (if it even works now).

    RustDesk looks promising but it sounds like it may lock the screen for the in-person user, but I’ve never used it so can’t say for sure.