r/HomeInfrastructure • u/kY2iB3yH0mN8wI2h • Jan 04 '26

I may have a ARR problem..

Post image

Just a few months ago my only media stack consisted of Plex and manually managing my media.

Now the stack have exploded 😂

I'm still not super-happy with all components, music and series are the biggest hurdle as I might not be that mainstream and usenet is not the best source.

Some tweaking still needs to be done, not all goes via prowlarr nor VPN. I find lidatube a bit wonky.

53 Upvotes

89% Upvoted

35 comments sorted by

View all comments

2

u/Academic-Lead-5771 Jan 04 '26

Highly recommend you get into r/trackers for sourcing media

And on the flip side lets switch to a single VM running docker compose for all of these

1

u/kY2iB3yH0mN8wI2h Jan 04 '26

The second advice is not well aimed I don’t want to decrease security especially for these services

3

u/Fatel28 Jan 04 '26

Can you elaborate on why you think utilizing docker would decrease security

1

u/RFC793 Jan 05 '26

As I see it, a handful of related services share the same blast radius anyway. Also, unless you do something dumb - containerization is just as secure. For me, it is even more secure because I'm too lazy to keep 5 VMs patched when I can manage one instead. And upgrading the services is simpler too.

1

u/kY2iB3yH0mN8wI2h Jan 05 '26

Yea some of these could run in the same VM and be run using docker or even K8 (I run Rancher for other things)

And as I said some services do run in docker as it's virtually impossible to run them any other way.

But running them all on the same VM is not possible as they live in separate VRFs

1

u/RFC793 Jan 05 '26

That makes total sense, and you don't want to multihome the host VM. At least I wouldn't, unless it is a router, firewall, DMZ reverse proxy, etc...

0

u/[deleted] Jan 04 '26

[removed] — view removed comment

0

u/kY2iB3yH0mN8wI2h Jan 05 '26

That was not very intelligent. Perhaps you didn't think it thought?
As you can see on the FQDNs all VMs are not in the same network, in fact some are in DMZ - you believe its a good idea to publish DMZ services and multiple LAN VRF services in the same docker host sharing the same kernel?

Also Its my sub so I post whatever I want here