I’ve tried both Unraid and TrueNAS. While I greatly prefer TrueNAS, Unraid is much easier to set up and get going for beginners. It’s been a while since I’ve set up TrueNAS from scratch, but last I tried, it wasn’t a very beginner friendly experience. If you weren’t already familiar with ZFS, you were in for a pretty difficult time.
I’ve never used your exact setup, but I have had issues with a web server behind a WAF not getting the client IP (all user traffic was shown as the WAF IP). In my case, the WAF was appending the client IP in a header, and I just had to tell web app to use that header as the client IP instead of the actual IP. Again, not sure if this helps since I have never used podman or caddy (this setup was with Wordpress and an Azure Application Gateway) but the same principles might apply.
I previously had a QNAP, and they honestly aren’t much better than Synology. I would definitely go the build your own route. For the OS, I really can’t recommend TrueNAS more. I’ve been using it for years and it is rock solid.
On iOS, I tap on my profile in the upper right, and the VPN-on-demand setting is right below my account.
I’ve been using Tailscale for about 2 months now. It has a VPN-on-demand setting that I keep enabled. That way, anytime I am not on my local WiFi, it automatically connects the VPN. According to my battery health settings, Tailscale has used 5% of my battery in the last 10 days. And I am even using a Mullvad exit node, which would use even more battery.
As much as I hate to send anyone to Reddit, the wiki on the Usenet subreddit is great. They explain the concepts and components and have a list of good indexers and providers.
If you have any other questions or need help setting anything up, feel free to send me a PM.
I would really recommend looking into Usenet. I was in your position a few months ago (starting to look for private trackers), but ended up hearing about Usenet and going that route instead. It has been amazing so far. It has everything I am looking for, I don’t need to worry about a VPN, and I can download as fast as my ISP can go, so I get my content in minutes instead of hours. I also don’t have to worry about my VPN disconnecting for some reason and my ISP sending me a nasty letter. The only downside is, if you want the best, you’ll have to pay for an indexer and a downloader, but it’s not that expensive and is certainly worth it for the benefits over torrents.
I think it’s this one: https://github.com/truenas/charts.git. It has those apps you mentioned.
That is what I ended up doing temporarily, but I think I will just make it temporarily permanent. I could likely set up another Docker container to run a DNS server connected to a DoH resolver, and use that container as the DNS server for Traefik, but that’s a lot of work.
I own 3 different domains and just today set up SSL services for them using Traefik (made another post for an issue I’m having with that).
I ended up doing a subnet router and that got me what I was looking for.
Did some more testing to get some details. The error I am getting from Traefik is that Cloudflare cannot create the record because it already exists (PiHole already has the entries). If I delete the records from PiHole, Traefik can then create the TXT records in Cloudflare.
That is almost the exact same thing I am doing. I have 2 Pi’s running PiHole in HA and I just made one of them the subnet router to allow this access. Since I will be the only one using this, I don’t care to use Funnel right now, but thanks for showing that to me. I am (obviously) new to using Tailscale, and that looks like a very neat feature.
I set that up, but the issue now is that my DNS server is replying back with the private IP, which is not accessible from tailscale.
EDIT: Figured this one out. Need to advertise the routes from one of my machines. Set that up and I am good to go now. Thanks!
There is an iOS/macOS app called “Pi-hole Remote” that can manage multiple PiHole instances at once. I use that because it will make changes on both instances at once for me.
Other than that, I log in to each device and copy paste.