Hi Jim. I just love your videos! Already subscribied as soon as I saw your first video. Keep up the good work! But may I request a new video? I would like to see a dedicated video regarding the security and accessibility for all your containers. Or some kind of advice on which one do you expose to the internet and how do you manage to access them from the internet (do you use VPN, or Authelia/Authentik with Traefik). Is there a way to access all our infrastructure securely and easily? My vision and what I would like to see is block all trafic from internet except the dashboard. This dashboard will be secured with user/password and 2nd step verification. And all my services will be accessed from this dashboard (like using the dashboard as a proxy). Is this scenario possible?
Really appreciated the feedback, Joel. Have you seen some of my earlier videos where I show you how to install CrowdSec to protect your proxy, how to install and configure wireguard/headscale to provide VPN access in case you don't want to expose services, also Authelia to add additional layers of protection to your existing containers? For your scenario, I wouldn't expose your dashboard to the internet. I'd follow my WireGuard video and create a split tunnel. That will allow you to access your dashboard from anywhere, securely over the VPN, and still route to the internet locally (i.e., if you're using a mobile device). If you really do want to expose it, then implement CrowdSec and Authelia as a minimum.
@@Jims-Garage Yes, I saw you other videos. But each one of them explains how to implement this single service. I would like to see a video explaining all the scenarios and then see your advice to solve them. So, your recomendation is to use WireGuard to expose a VPN service and only then access all my services. But some of my services I would like to expose them in the internet like for example Plex, Ombi, Remotely, Bitwarden, XWiki and NextCloud. How can I expose those services easily and securely? In the case of Plex and Ombi, I would like to give access to other people but not my VPN. How can I solve this problem?
@@joelfrojmowicz you will need to port forward the relevant ports on your firewall (I showed how to do that on Sophos previously), most will be fine with 443 (HTTPS). For these services, integrate it with crowdsec and Authelia (if needed). There's always a risk to port forwarding but it's pretty small. It's also worth creating a DMZ where services connected to the internet only have explicitly declared access to internal servers (e.g., if it gets popped people cannot propagate to other services).
@@joelfrojmowicz yes, sorry, I thought that was a given. Authelia and crowdsec both leverage a proxy. So you have, firewall -> proxy (with Authelia and crowdsec) -> container (with restricted access to local services).
The documentation is a bit confusing with homepage but after spending a few hours of trial and error with it. I think I am fairly happy with my setup. As per usual with some open source projects, they are sometimes very thin on configuration examples in the documentation...
Awesome, yes documentation is always difficult on open source, even paid products often suffer! Feel free to share your new shiny dashboard on discord.
Come on Jim! Are you also saying 'Knocking on heavens door' is a Guns & Roses-song? In Norse mythology, Heimdall (from Old Norse Heimdallr) is a god. He is the son of Odin and nine mothers. Heimdall keeps watch for invaders and the onset of Ragnarök from his dwelling Himinbjörg, where the burning rainbow bridge Bifröst meets the sky.
how to you add more widgets are not at their website instructions? for example TeamSpeak 3 Server, Piwigo, Subsonic, and other Games Servers, besides Minecraft?
Hi, good video , the explaining are awasome. But I have a problem. I add plex on the home page and show an error that put: API Error Information. Also in navidrome or qbittorrent that add like widgets too. Do you know how to solve this problem? thanks
Dashy looked so awesome, that's until I tried the demopage. How on earth such common thing be so broken? 12:58 that's very minor bleed on yt downloads and cpotato, but trying to put the most minimal layout it essentially comes 100% unusable. Not cool at all.
@@Jims-Garage It's not bad. Ended up trying it and it certainly is very so-to-say adapyable. Still I gotta say it's not cool that even bit too long names can be blocked by custom elements and that minimal layout imo is still very bad thing. But I get it. So much possibilities to customize its really hard to take everything into account. Just saying that maybe it would be worth to check those issues out before expanding. I used Heimdall and its very limited and I do prefer Dashy, eventhough you gotta think bit more with it. Heimdall is bit too limited imo. Works really well though.
Hi Jim. I just love your videos! Already subscribied as soon as I saw your first video. Keep up the good work!
But may I request a new video? I would like to see a dedicated video regarding the security and accessibility for all your containers. Or some kind of advice on which one do you expose to the internet and how do you manage to access them from the internet (do you use VPN, or Authelia/Authentik with Traefik). Is there a way to access all our infrastructure securely and easily?
My vision and what I would like to see is block all trafic from internet except the dashboard. This dashboard will be secured with user/password and 2nd step verification. And all my services will be accessed from this dashboard (like using the dashboard as a proxy). Is this scenario possible?
Really appreciated the feedback, Joel. Have you seen some of my earlier videos where I show you how to install CrowdSec to protect your proxy, how to install and configure wireguard/headscale to provide VPN access in case you don't want to expose services, also Authelia to add additional layers of protection to your existing containers?
For your scenario, I wouldn't expose your dashboard to the internet. I'd follow my WireGuard video and create a split tunnel. That will allow you to access your dashboard from anywhere, securely over the VPN, and still route to the internet locally (i.e., if you're using a mobile device). If you really do want to expose it, then implement CrowdSec and Authelia as a minimum.
@@Jims-Garage Yes, I saw you other videos. But each one of them explains how to implement this single service. I would like to see a video explaining all the scenarios and then see your advice to solve them. So, your recomendation is to use WireGuard to expose a VPN service and only then access all my services. But some of my services I would like to expose them in the internet like for example Plex, Ombi, Remotely, Bitwarden, XWiki and NextCloud. How can I expose those services easily and securely? In the case of Plex and Ombi, I would like to give access to other people but not my VPN. How can I solve this problem?
@@joelfrojmowicz you will need to port forward the relevant ports on your firewall (I showed how to do that on Sophos previously), most will be fine with 443 (HTTPS). For these services, integrate it with crowdsec and Authelia (if needed). There's always a risk to port forwarding but it's pretty small. It's also worth creating a DMZ where services connected to the internet only have explicitly declared access to internal servers (e.g., if it gets popped people cannot propagate to other services).
@@Jims-Garage Isn't better to doit by using a reverse proxy like NPM or Traefik and use it with Authelia/Authentik?
@@joelfrojmowicz yes, sorry, I thought that was a given. Authelia and crowdsec both leverage a proxy. So you have, firewall -> proxy (with Authelia and crowdsec) -> container (with restricted access to local services).
Homepage is so nice for people new to the homelab scene. Considering dashy after your review
It's a slippery slope, you'll be changing every month if you aren't careful... truth is they're all good, but dashy does look so cool.
I am very much liking the Homarr app. I think it's design is best across the board. It's still growing and would be releasing 1.0.0 soon :)
Organizr is wonderful as well. Lots of customization and love the app bar on the side to navigate between them
Good shout, sorry I missed it, too much to put into a single video... I'll definitely check it out though.
Sorry, only catching up on all the videos now. Just wanted to give my +1 for Organizr.
The documentation is a bit confusing with homepage but after spending a few hours of trial and error with it. I think I am fairly happy with my setup. As per usual with some open source projects, they are sometimes very thin on configuration examples in the documentation...
Awesome, yes documentation is always difficult on open source, even paid products often suffer! Feel free to share your new shiny dashboard on discord.
I liked your video a lot. And will now search the net a little more, to find out if I should change to Dashy!!
Thanks, it's really a matter of preference. Both dashy and homepage are great choices.
Come on Jim! Are you also saying 'Knocking on heavens door' is a Guns & Roses-song?
In Norse mythology, Heimdall (from Old Norse Heimdallr) is a god. He is the son of Odin and nine mothers. Heimdall keeps watch for invaders and the onset of Ragnarök from his dwelling Himinbjörg, where the burning rainbow bridge Bifröst meets the sky.
Haha, thanks. I was actually aware of Norse mythology, I find it fascinating.
Great video, thanks!
Thanks 👍
Thank you very much for this very interesting video!
Quick question: is it possible to integrate a 2nd Docker instance from another server?
Thanks
It should be, you need to give it remote access to the socket.
thank you
You're welcome, drop your dashboard in Discord and let's see it
Great vid think I need to move to dashy
Thanks, me too!
how to you add more widgets are not at their website instructions? for example TeamSpeak 3 Server, Piwigo, Subsonic, and other Games Servers, besides Minecraft?
Hi, good video , the explaining are awasome. But I have a problem. I add plex on the home page and show an error that put: API Error Information. Also in navidrome or qbittorrent that add like widgets too. Do you know how to solve this problem? thanks
Sounds like you need a Plex API token. You can find out how to create one here: www.plexopedia.com/plex-media-server/general/plex-token/
A year or so ago I gave Dashy a shot but I may have to spin it up again. I think it's time to stop distro hopping and start dashboard hopping
It's a slippery slope!
Dashy looked so awesome, that's until I tried the demopage. How on earth such common thing be so broken? 12:58 that's very minor bleed on yt downloads and cpotato, but trying to put the most minimal layout it essentially comes 100% unusable. Not cool at all.
I think the demo page sells it short. There are some amazing dashboards you can create with Dashy.
@@Jims-Garage It's not bad. Ended up trying it and it certainly is very so-to-say adapyable. Still I gotta say it's not cool that even bit too long names can be blocked by custom elements and that minimal layout imo is still very bad thing. But I get it. So much possibilities to customize its really hard to take everything into account. Just saying that maybe it would be worth to check those issues out before expanding. I used Heimdall and its very limited and I do prefer Dashy, eventhough you gotta think bit more with it. Heimdall is bit too limited imo. Works really well though.
Oi, are you aware of a way I could send a Wake-on-LAN magic packet when I click on the button for a particular server?
Great name! I am not aware of a way to do it through the dashboard, but it may support custom scripting, or their could now be a moule