Mama told me not to come.

She said, that ain’t the way to have fun.

  • 2 Posts
  • 19 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle















  • Awesome, thanks!

    In terms of architecture, which is preferred:

    • separate pod per “app” (e.g. NextCloud), but all one network
    • separate pod and network per app
    • everything in one pod

    I’d like to have one gateway, Caddy, so my cert renewal and proxying are all in one place, and I’d like those proxy configs to look like http://<container>

    I’d prefer my containers not be able to talk to each other unless I specifically allow it. The second option would get me that, but I think it would force me to expose ports for each app to the system.

    TL; DR - Can I have a “Caddy” pod that can see exposed ports from other pods, but hide those ports from regular system users? If not, I’ll probably do the first option. I also want to be able to expose ports to the host on a per app basis if needed.