I see, thank you.

I use Bitnami SealedSecrets. Does anyone know if that’s going down the shitter too?

I have had Jellyfin directly open to the Internet with a reverse proxy for years. No problems.

For my simple use case (storing Velero backups), it works perfectly and with a resource footprint ridiculously low (~ 3 MiB memory when idle). In comparison MinIO used 100 times more memory.

Oh, I didn’t realize this was for plain containers, sorry.

For that I use Ansible to deploy the containers in my server. The secrets are stored encrypted in my local machine with passwordstore and I use the passwordstore lookup plugin to load them in the playbooks/templates.

In my homelab I use Bitnami’s sealed secrets to commit the encrypted secrets to git and deploy with ArgoCD.

On the other hand I value Authelia single configuration file which I can version control in git. Authentik is a click-ops burden.