This is for traefik but might help to understand the process and change it for caddy (https://youtu.be/liV3c9m_OX8)

You should have

Service.local.domain.com

For local only services (Vaultwarden) and

Service.domain.com

For external things (immich)

I’m your router / Pihole locally, you setup the above URLs to point to the IP of caddy

I did this using a POE switch to both power the cameras and also have that entire switch on a VLAN. On my OPNSense, that vlan only has permission to send or recieve packets to home assistant which is on my main LAN. They have no other access to anything including each other on the camera vlan.

Other than the initial setup, the only interaction I have with the cameras is via home assistant. This allows them to be completely isolated and still have remote access as per usual with home assistant.

My HA is using the all in one VM setup on Proxmox. I would highly recommend HA installed as a VM rather than Docker due to the ease if installing plugins. After that the above setup will keep your IOT devices nicely isolated.

This is traefik, but its worth watching this because local SSL and external SSL setup is amazing and highly versatile for homelab

https://youtu.be/liV3c9m_OX8

When you adapt this to caddy I recommend a similar certificate configuration

Has anyone tried windows teams app in bottles or win-apps?

If anyone’s Firefox auto updated like mine you can uninstall the extension, go to the Bitwarden extension page on the Firefox website and manually install the old version. Only needed if you can’t update vaultwarden right away.

If you check the github discussion from the devs that patched the issue it doesn’t seem intentional to me (not an expert). That being said I assumed the same thing.

My browser auto updated the extension at a very inopportune time and from some reason KDE connect from my phone to computer which is usually very reliable also wouldn’t connect. Was quite annoying until I realized I can just log into the vaultwarden website directly. I don’t think I’ve done that in years

A pulse 8 would actually be very good with this. You can turn the computer on with a USB remote and the pulse 8 would send a signal to turn in the TV. From that point on, everything else would be controlled with the USB remote talking directly to the computer.

Also the website says CEC will work, so maybe they have a more elegant solution already

gOS is actually pretty good with bank apps

https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

On my unraid router, this is called DNS override

Immich.example.ca resolves to a local ip when you search for within the network. For every DNS entry on cloudflare for my domain, I have an equivalent one on my router and pihole that points to the local domain

Thats an excellent feature, thanks for the suggestion!

Thanks!

This looks fantastic! Thanks!

No but it seems perfect with the chores section. Thanks!

This looks great, I had no idea it had household management as well. Will give this a try.

Web app is probably best. That makes it easy to share with other members in the family so anyone can check off a task once done. Also having tasks pile up when they are not done is also very useful so you can see the backlog. It’s close to a calendar app but not quite optimized for something like this.

Ideally tasks could have a description section that explains how to do it, like flushing the water heater could have be exact steps written for the heater tank that you have specifically avoiding the need to keep looking it up every year.

There are several good webapps like this already, but they all are paid and locked in to their platform.

Authentik handles SSO for all my apps like immich, linkwarden, owncloud etc. Openid when available but some web apps are done via forward proxy auth. Jellyfin uses LDAP via authentik which isn’t sso technically.

Other than me, no one else mounts samba shares directly. All personal files are synced to server and other devices with owncloud (OCIS).

Yes its config file only, but if you get the File editor app, it’s quite easy to just copy and paste a few lines into the editor.

Once it’s setup it never changes.

I’ve not looked for an LDAP solution but stuff like this is why i went with authentik over other solutions. Because authentik has LDAP built in, i can use this when needed (jellyfin) but then use openid for other apps (which us superior in almost every way for home lab use)

There are auth libraries that you can just plug into your app so you don’t even have to worry about that part yourself and just focus on the app

https://authjs.dev/getting-started

I use this tutorial to setup external only and internal only URLs both with SSL

https://youtu.be/liV3c9m_OX8