Wait till you learn how many security vulns jellyfin has, and that you can't put it behind basic auth due to further out stand bugs

Yes that's exactly how I run it. I backup the PBS vm separately also, in case the host goes down

Honestly Brave News is the only solution I've found for that. Just go to Brave search and search for "news". It will aggregate the top stories of the day, group the different sources, then provide an AI generated digest of the stories upon request.

There really isn't any decent alternative. I can run 4 Navidrome servers along side each other using less resources than a single copy of the alternatives. It just works and does almost everything you could want.

Omg, get over it. You haven't discovered the holy grail of automation or we'd all be using it. yaml is the devil I know. Sue me. I've been through these orchestration tools (not very much at MCL I'll admit) and in the end there is always something that's a pain in the ass. Chef's integration with vault sucks and recipes can become role hell. Puppet needs agents and the initial setup is awful. Ansible doesn't do well where ssh can't go, and it touches stuff when it makes changes, which isn't fun for the guy reviewing FIM. I'm sure MCL has some quirk that makes working with it nasty. We've gone down the route of using ipam as an intermediary to collect basic configs and act as a repo for orchestration, and let me tell you, APIs aren't the silver bullet. Updates to DNS records aren't exactly fun when they don't work because a client's stack is a snowflake combo of pinned packages. So forgive me if I remain skeptical that yet another orchestration platform has "solved" it the way you're describing. I've been hearing this for 30 years and heard the promise from a few players like Altiris, canonical (landscape), and many devs with bespoke scripts. They all suck in some unique way.

Well definitely faster than 1 Opteron at least: https://www.cpubenchmark.net/compare/1569vs2910/AMD-Opteron-6272-vs-Intel-i5-7500 Single thread is massively better, but if that's useful or not depends on the kinds of applications you're running.

If you're putting in that much work, please submit those edits to musicbrainz! We need all the help we can get

Yeah, it's on the local network, so I'll need to mess around with aliases again. And they seem to think that it's possible to set this up on a subfolder, with the APP_SUBDIRECTORY variable, but it doesn't exactly give the impression of rigorous deployment testing, so you're right that I should assume that part doesn't work. Thanks!

Thank you! I'd heard of Proxmox but not looked into it yet.

It’s not exactly what you’re looking for, but as an intermediate option, you may want to look into docker user namespaces. https://docs.docker.com/engine/security/userns-remap/ It effectively transforms the containers’ root user into a non-root user outside the container (e.g. for filesystem accesses).

Would love an invite.