version: '3'

services:
  coredns:
    image: coredns/coredns
    container_name: coredns
    restart: always
    volumes:
      - /home//Documents/docker/coredns/:/root/
    ports:
      - "53:53/udp"
    command: -conf /root/Corefile

This should do it.

No. Just VPN in and SSH in.

https://docs.linuxserver.io/images/docker-swag/

I would tell you to entertain swag, has a lot of pre-built configs and has some integration with crowdsec and docker mods.

Clients just work, no matter what I have tried with the jellyfin client on android tv it always fails on first or second load up, also subtitles never quite work as smoothly as they could.

You can download movies or tv shows from your library so you could watch them while without internet, nice for road trips or flights.

Also I use https://trash-guides.info/ for all my setup for subtitles and no matter what I tweak they just are always a little off with jellyfin, no so with plex.

I just switched with this latest sale to plex from jellyfin and here is so far as to why.

• Subtitles just work
• Remote play is seamless
  • This includes consistent transcoding
• Chromecast works on iOS!
• Clients are 1000% better
• There are clients for almost every platform
• Skip Intro!
• Skip Credits!
• I can download to my device!

To add about my server, it is a xeon 1231 v3, 32gb ram, 20tb raidz1 and a nvidia p2000 on a 200/200 fiber connection (using pfsense).

If all you want to do is forward to google and redirect internally just use unbound or knot.

I self host vaultwarden but I also pay teh $10/year to support the project, I self host for Collections and I use the paid bitwarden at work since they do not allow ddns addresses in our network.

As long as passwords are strong it's usually fine, I use ldap through jellyfin on authentik and everyone gets a passphrase.

Between them Immich is a lot easier to use, the app is much nicer I have found.

Also if you are not using nextcloud for other features, installing just for photos is a huge drag on resources.

Also immich just added gpu support.

They install just like any other container.

I just use hotio suite which has been great, I run bazarr, prowlarr, qbitmanage, qbittorrent, radarr, sonarr, sabnzbd, and unpackerr on an old asustor nas.

Adguard !== uBlock

One is per device based and the other is solely for DNS blocking, they compliment each other.