Keycloak here, I plugged my keycloak into my Google workspace. Yes I know Google!!

But the login flow is amazing and I get all the MFA without the faff

The morale of the store is, read the release notes to see what’s changing.

I don’t blinly update everything, but I do try to be on the more up to date end of things.

Case in point is nextcloud, that’s now on 31.0.0. I don’t ever jump to the latest untill the first point release is out, as nextcloud 31.0.1 is now out Wednesday night is nextcloud update time

If you run home assistant, that has a shopping list. We use that, most other things have a full on meal planner that I don’t want

If you run a single DNS server, you will always have downtime when it’s restarted.

The only way to mitigate that, is to run 2 DNS servers.

I setup my network to use pihole as the first DNS and the router as the second, most of the time pihole is used. Unless it’s down

Not sure about linking 2 HAs together, that could get complicated real quick.

If you have your DMZ setup, put HA in that and only allow web access from your main network. Also with camera, there is a feature to allow direct access if you and the camera are on the same network.

As a homelabber and systems admin, I would start with learning how to use Linux on the command line.

It’s all well and good looking at docker, but if you don’t know how to move about or edit on the command line. Your going to get stuck real quick.

Once your happy doing simple tasks on the command line, I would actually look at running something like wordpress on a pi or VPS. That will help you understand how to connect services together, and cement your basic command line knowledge.

I like the sound of that

Yeah, OVH do website hosting as well

I moved all my domains from Google to OVH, OVH have an API so you can get certs with certbot. You could also use the API to update records for a dynamic home broadband

I have stuff in new releases.io and also GitHub release RSS feeds in nextcloud, I then sit down once a week and see what needs an update. Reboot when required.

I nextcloud news (RSS) for that sort of thing, you can organise feeds into folders and see an unread list. There is even a mobile app to get whats on the server

I would recommend not using a mobile to edit a spreadsheet, I have tried and gave up as its less the ideal.

your running something on port 443 already, if its nginx thats still running kill it. If not, then found out what is running on port 443 and kill it use ss -nlp to find the process name

for some helpful config, the below is the logging config I have and logs have never been an issue.

You can even add 'logfile' => '/some/location/nextcloud.log', to get the logs in a different place

  'logtimezone' => 'UTC',
  'logdateformat' => 'Y-m-d H:i:s',
  'loglevel' => 2,
  'log_rotate_size' => 52428800,

Do a backup first, if the update does go south the backup might apply to a new install

I moved to Google workspace for email, yes I know it Google.

I have my home IP and dedi IP in the routing settings, then just use SMTP to Google and let them forward to me.

All servers have null mail installed and setup for Google, I also have docker containers with config if needed

You need a way to hand it a file for editing, nextcloud can do that

I use nginx as the internet facing proxy, write my own config and manage it with source control. Also use traefik in docker land with service labels to configure it

Yes a VPN could solve it. Run the VPN on a domain you know is good and on port 443 HTTPS.

Im not sure I understand your issue, DNS is the magic that allows you to goto home.somedomain.com and get a webpage. But you still need to give DNS the location of the server, much like the contacts in your phone.

DDNS is how you have your home connection attached to a DNS record that is updated when the IP changes, see other comments.

Also once you understand how it all hangs together, you can do some really cool magic to make getting to your services easier