Matt The Horwood

I have that setup, my domain is hosted by OVh and they have an API that you can use to get a wildcard certificate with.

At home I run pihole and that has some sites in as local IPs, but if you look the same site up from OVH you would get an internet IP

I would recommend OVH for DNS, they have an API and are on the list for that tool. Also you can use the API to get lets encrypt certificates

My solution to that issue is to share my media over NFS with a raspberry pi connected to the TV, the pi runs OSMC (https://osmc.tv/) and has the media direct. you can control OSMC on the pi with your TV remote

Please for the love of mike, update your servers frequently!!

I login to all my servers weekly for updates, both OS and software

I do that too, my home doesn’t have IP V6 at all here in the UK. so my dedi proxy’s ipv6 to my home.

Also be advised that wordpress will attract all the internet to try and hack in, so make sure you keep everything up to date

Would recommend OVH for both domain name and DNS, they have DNS APIs so you can get certificates from lets encrypt with ease. Also you could update your zone when your home IP changes

What your after is DNS fail over or round robin, round robin would be my option as both sites could be independent

I would start with a Debian os base, install docker and turn it into a swarm manager. Then look at stacks and how services work, if you find your running your host too hard. You can add a work host and stread out.

Once you have docker swarm running, get portainer running. I use portainer as a visual whats happening on my swarm, but I use the docker cli to start and update all my stacks. I have my stacks in a git repository so that I have a backup and history of what changes I did.

Now your a docker master, of sorts.

I have all external mounts in /mnt, if my container needs to use it then it’s in the compose file to use the local mount.

All my compose and stacks are in a git repo, the repo lives in my home dir and pulled fromy Gogs server. That only I can access.