Ive built a setup for hosting websites which consists of:
* Host running #microos with #podman
* #Treafik and #sshpiper at the edge
* #Nginx, php-fpm, #mariadb + phpmyadmin + nginx or #postgres + dbadmin, openssh for each site

It actually works quite well, openssh keybased access is to transfer files into the containers, traefik does the reverse proxying.

I'm just wondering if its a sustainable and maintainable setup. Sometimes just going with a "standard" solution seems so much easier.

Still looking for a good way to allow someone to eg. sftp/scp into a #container and allow them to update files, which will then be read by another container's httpd.

My initial plan was to use #sshpiper and the #linuxserver openssh container, but I'm running into issues where the volumes are just mounted with root permissions inside the container, which is what I definitely don't want.

Modifying the perms manually is also not acceptable - I want to automate the process as much as possible -> have a template of a compose file that spins everything up for a given FQDN.

I'm 80% there, just the file transfer method I need to figure out.

GitHub - tg123/sshpiper: The missing reverse proxy for ssh scp

The missing reverse proxy for ssh scp. Contribute to tg123/sshpiper development by creating an account on GitHub.

GitHub
GitHub - tg123/sshpiper: The missing reverse proxy for ssh scp

The missing reverse proxy for ssh scp. Contribute to tg123/sshpiper development by creating an account on GitHub.

GitHub