OTOH couldn't it be done with Cloudflare Zero Trust ?
Have the GH Pages (sub)domain proxied with CF, protect the URL with Zero Trust, for SSO itself there are several IdP available [0]. First 50 users are not billed.
IMHO that depends on couple of factors and use case, and I am happily running either on two different NASes.
OMV:
-- has Docker plugin with Compose support (no need for sep. Docker GUI like Portainer)
-- SMB shares are (somehow) more reliable on Win clients
-- has more beginner friendly GUI and attitude, easier to share with other users
-- batteries-included features like fail2ban + Wireguard
Cockpit:
-- first class citizen on EL / Fedora distros
-- Podman yes, Docker no - no Compose/Quadlet support
-- killer features like VM managements and Terminal
-- bugs with Samba
I have both T480 and M1Pro 14", and let me tell you once you go Mac, you don't want to go back. I am keeping the T480 for some Linux/Windows workloads, but that is it. MBP is just better in every regard. And even though I have maxed out batteries (plural) with 98% health on '480, MBP has twice the battery life.
Londoner here. On daily basis I don't _feel_ restricted on broadband, besides some thepiratebay and some other good old thorns in copyright industrial complex... But I know GCHQ is watching. So nextdns.io is my trusty friend, VPN is no problemo.
On phone I have EE MVNO and without VPN I get blocked pr0n, but not much else. Yes they wanted proof of ID despite having my Direct Debit details.
Personal note: But if you were to migrate to UK, probably not a good time this decade, the cost of living is hitting here hard, post-Brexit shambles are annoying and the compensation is not worth it anymore IMHO. Just the music scene is unbeatable, hence staying.
I tried to migrate from Docker to Podman 3.4 recently, but just gave up. It just have still weird quirks, containers were exiting without any clear cause, fighting with SELinux... I could not manage portainer.io to get working... the docs are somewhat incomplete...Lack of support in Debian [1] means I can't easily migrate my SBCs either.
I have Podman on my radar, will give it a shot next year, so far it still feels still quite bleeding edge. But kudos to red hatters for another major release!
[1] Fully knowing there is v3.0.0 in repos for Stable, but switching to Testing just because podman?
i have 3 cheapish VPS with public IPs and no VPC . Am but struggling to find a way to get k3s HA working with MetalLB, I dont have EIP /NodeBalancer resource, and dont want to resort to mere 1master+2agents cluster. Any tips or links are appreciated