Thanks for looking into it. I am not publishing any ports other than Caddy, and forgejo’s ssh port that I think cannot be forwarded. You mean I should block port 3000 from my VPS as well, right?

I am having trouble reading ss -nltp output, could you explain what each entry means?

Also I am concerned that allowing access to podman1 private network interface could be too permissive. How do you think?

Yes, they are running on the same server. I am hoping to communicate through host network, maybe that’s not working well

Thanks a lot for on-point answer! I wish the answered in the issue wrote a blog post, it would have been of great help.

Thanks! Adguard seems like a good fit for me, gotta set it up soon.

Hmm, so basically AdGuard is streamlined for the dns-filtering usage? I was thinking of buying an raspberry pi and running pi-hole on it, can I do the same on adguard, presumably easier?

Thanks a lot for detailed analysis!!

May I ask about difference between Adguard Home and Pi-Hole in terms of “setup once and forget”?

Tracking your web behavior? That sounds quite interesting, how do you utilize the data?