Tbh, I have given up on Proxmox Helper Scripts for more demanding things recently as I had similar issues.

You can use the fully packed VM appliance or iso as well. Or Docker.

Or,tbh,try the manual install,it’s somewhat straight forward. If you need help let me know.

Another option: Zabbix.

Sounds like overkill initially, but works fine and can be automated fairly well. Once installed (as a LXC/VM or on a seperats device if you want independent monitoring), you can setup a API acess for monitoring Proxmox (which will monitor all LXCs,etc. automatically) and then add the agent on top to monitor the underlying machine. There are dozens of ways to monitor Zabbix hosts temps, HDDs,etc. available online.

In theory you could also let a zabbixproxy collect all your hosts data (e.g. your Proxmox Host, your switch,etc.) in your network and then send it to a VPS outside your network so you monitor offsite and can be alerted when not at home.

ZeroSSL has unpaid plans (for non wildcards) that have a few advantages that LE doesn’t:

• No Ratelimits,
• A WebDashboard
• More ways to validate
• They have a RestAPI

And, first and foremost, they are European and it’s always good tk have an alternative ready.

But as said before, I totally missed the wildcard issue, as I haven’t touched these for a long time and recently had more to do with my public services (which get a ACME single domain cert via zeroSSL)

Sorry, then proceed with LE. Got that part mixed up, you are totally rjght.

It is absolutly possible, but oersonally I would highly recommend getting yourself a proper public domain for that,even if you won’t use it otherwise (it’s even somewhat saver if you use a designated one for it).

To make it really easy get the domain with someome who also provides DNS with it (Hetzner is a solid choice, so are others, has to have an API). (E.g. “mydomain.casa”.)

Now get an internal DNS server that can handle it’s own zones. I always recommend technitium, but there are other choices. Pihole is not a good choice here.

Next thing is a reverse proxy,as you mentioned. If you want it easy, NginxProxyManager is a good choice, but limits what one can do later. But it kind of works out of the box. Traefik and caddy are both often named,but I found none of them as “fire and forget” as NPM is - and caddy can’t do a lot of things either. Traefik is what I currently use,but even using Manatrae or similar GUIs it’s sometimes a pain. But it’s absolutely powerful especially when you run a lot of docker container on the same host. Tbh, if I had not some special requirements I would still use NPM.

Now, what to do? (Not a full manual, more like a ovrview that it’s not that complicated)

1. Install all of the above on docker.
2. Setup NPM with a wildcard certificate, register with zerossl.com (has advantages over LetsEncrypt), add them as a provider and get a wildcard(!) certificate. (*.yourdomain.casa).
3. Setup a proxy host. You simply add the domainname (nextcloud.mydomain.casa),point it to the actual container ("192.168.1.10:3000) and choose the wildcard certificate as a SSL and switch on “force SSL”.
4. Go to the DNS server, create a DNS zone “mydomain.casa” and then simply add “nextcloud.mydomain.casa” and point it to the Reverse proxy IP. Done.

For good practice I would recommend to also keep a zone that links directly to the services so you can use that whenever necessary. (mydomain.internal)

Sadly it won’t help much if at all (that is why they are not required in professional kitchens per se)- people still touch things they should not and then touch these things ungloved.

There sadly are various studies proving this.

I would avoid a Raspi/ARM at all costs. But there is a third alternative: A x86 SBC like a Zima Board or blade might be exactly what you are looking for. Small, powerful enough and far easier than an ARM to maintain.

Look at the Zimablade maybe. Full,Proxmox capabale x86, can be powered via PoE with a splitter(would not recommend it,though), cheap.

I have expanded my setup over the years. And tbh, I reached so many stages where I read up how pi-hole or adguard achieved this and that. And every time it was like “damn,if you want more than the basics they are actually more complicated. I just have to look up this and this and Technitium does it by the book.”. That’s so refreshing.

Yeah, came here to write about Technitium. It is rock solid. Absolutely. It looks intimidating at first but you soon figure out you hardly need 10% of the options in the beginning.

But it’s so rock solid and good…

Yeah, as many said: It’s dead. I was heavily invested into Wiki.JS but cannot recommend it to anyone anymore due to the antics of the developer. Even if the mysterious new major version that should fix every issue comes out at some point, as long as the development policies don’t change it’s not worth it.

I am currently actively moving everything away from it.

Paramedic and former ambulance service director here: In my jurisdiction the car is the sole responsibility of the police - in theory. So basically we call the police and let them handle it. They will decide if it’s safe to leave it where it is (e.g. if it’s on a highway, post accident or otherwise a traffic hazard). They will usually ask the patient if they should call a specific company or,if the car is still roadworthy, if they should call someone like a relative to get it - within certain limits of course, they won’t do that on a highway and if the relative is two hours away the patient is also SOL.

If the car is stationary as in a safe and legal parking spot it’s a bit different, then in theory we could still call the cops,but they would hate us for it when the patient is conscious. In these cases most crews simply lock down the car and give the key to the patient - the same way we lock down an apartment when we leave with a patient.

The only case when we might leave a car unlocked and unattended is an unresponsive patient that has a transport priority,aka we need to go NOW. We will still call the cops (and they will either find a way to secure the car or tow it),but we sure as hell won’t wait. While I might have a minute to spare waiting for the cops for an average unconscious patient e.g. post seizure there are a lot of reasons where I don’t have that - and might not have the time in some awake cases as well. In these cases a car might be left unlocked - especially in times when the key rarely is still required in the ignition anymore where I can easily find it. But in these cases the life of the patient takes priority over any material assets.

(To give you a more practical example: The last guy I left the car unlocked was a gentleman with sudden onset of massive pain between the shoulder blades and a large difference in blood pressure values between the arms - a good sign of a thoracic aortic aneurysm, a very deadly condition. That’s a “fuckfuckfuck we need to go now” condition. I looked for the car key once for around 5 seconds,the car was a mess, I couldn’t find it. Dispatch sends the cops,but they often take a long time here once they know we are no longer on scene. Sadly he didn’t even make it to the hospital alive. But we tried).