I think that proposing immich for every use case out there is not the correct answer.

As much as I like immich, this is not a good use case… iMHO.

All that? Well, I understand your point, but honestly I have more fun learning something new, and was really little work.

Anyway… Its an option too

No you don’t need two: in fact I have only unbound setup to do everything with one piece of software.

Better or worse? No idea, but it works and its one less piece that might fail.

I have a quite rich selfhosted stack, and DNS is indeed part of it.

For such a critical piece of infrastructure I didn’t needed a container, just installed Unbound and did some setup for ad blocking and internal DNS rules.

Here my setup: https://wiki.gardiol.org/doku.php?id=router:dhcp-dns

You could go with an independent pihole maybe, but that would double the chances of a hardware failure…

Using one device for everything might seem risky, but actually has less chances of failure ;)

That’s not the point. Maybe you can, but for how long? you will never stop asking the question with docker…

I think you wrote it back ways: transitioned from docker to podman?

Yeah podman should use quadlets, not compose, but still works just fine with docker compose and the podman socket!

Yes you need both 80 and 443 for certbot to work. Anyway having 80 to redirect to 443 is common and not a security risk.

Podman guys… Podman All the way…

There is no “write and forget” solution. There never has been.

Do you think we have ORIGINALS or Greek or roman written texts? No, we have only those that have been copied over and over in the course of the centuries. Historians knows too well. And 90% of anything ever written by humans in all history has been lost, all that was written on more durable media than ours.

The future will hold only those memories of us that our descendants will take the time to copy over and over. Nothing that we will do today to preserve our media will last 1000 years in any case.

(Will we as a specie survive 1000 more years?)

Still, it our duty to preserve for the future as much as we can. If today’s historians are any guide, the most important bits will be those less valuable today: the ones nobody will care to actually preserve.

Citing Alessandro Barbero, a top notch Italian current historian, he would kill no know what a common passant had for breakfast in the tenth century. We know nothing about that, while we know a tiny little more about kings.

Install some DNS test app for Android and check that it does get resolved.

My will resolve the home server address to 0.0.0.0, and I get the same network error.

I have a very similar issue. Seems like Android will bypass your DNS resolver and thus cannot resolve your local names.

I have my home services on “home.my domain.com” accessible from outside and re-mapped to “192.168.0.1” (my internal server IP) at home, and all PCs can access it while all android phones can only resolve to the public IP.

I feel it’s something related to DoT or similar but haven’t yet dig in that.