Could you just secure the physical location?

Do you not live in a safe place?

I’m moving to Podman quadlets for self hosting infrastructure (Forgejo and Woodpecker CI) and Kubernetes for the actual services. I also still need to figure out were I’m going to do SSL terminations.

Nextcloud will be moved to Nextcloud AIO

Maybe git+Jekyll+CD+web server?

You could setup some automation so you just create pages via Git.

You definitely do not want to expose Plex or Jellyfin to the internet.

That’s a great way to get PWD as Plex has had its fair share of vulnerabilities

Port forwarding is almost is to easy to do as people do it without understanding the risk. That’s one of the ways you end up with massive botnets.

You need to forward traffic

SSH is just plain TCP. You probably were trying to use http.

Is there a physical phone that’s just a USB device?

If so then you could connect a phone to a PC or tablet

This

I would go Forgejo all day every day

That’s fair

However I have to say the HDhomerun has been fantastic. It is a simple device that provides a local web API that allows devices on the network to request a channel stream. My device died after a few years and they replaced it for free.

If Plex works for you that’s great. However if your current setup breaks I would look into the HDhomerun

I use the HDhomerun

There are plenty of VPN solutions.

Get something like Netbird and share the port.

I’ve used it for about 2 years and it has been mostly stable. The only major issue I had was about a year and a half ago where it got stuck in a infinite crash due to a corrupt database. It was a known bug that was fixed.

1. You absolutely need to be careful sharing your own media with people outside your household as that’s probably illegal. If you still need to you can setup a VPN.

2. The Jellyfin music player has recently seen a lot of love

No, I don’t think so

If you are going to do that stuff use a hardened browser with Ublock Origin

Rookie move

That’s the old style of doing things.

These days everything is set via extended attributes.

Don’t do this

Samba was not designed to be containerized. Install Samba native and try again. I’m almost certain the problem will go away.

Anyway, I would recommend you read this page https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs

Hand saw?

I think you are still missing an e in the title.

Cool project though

You missed an e