Ah, portainer gives me an error if one is, so I just mash the numpad and choose another.

I'm a little confused why this would be needed, I only need the port during initial setup of a stack when I'm writing it and configuring the reverse proxy, once it's running everything goes through the proxy and I never need the port again.

Proxmox itself uses about 1GB, so other than that you have the rest left over for everything else.

IMO Nextcloud AIO is a mess that doesn't work properly for anyone used to docker and docker networking. It makes lots of bad assumptions about how things are configured.

Managed to gain access to the container by using the docker virtual ip of the apache container, but i see this as no solution because the virtual ip can change whenever an update is applied.

The reverse proxy docs have something in the section "Running the Reverse Proxy in a Docker container on the same server"

It sounds like they want you to use network mode host on the NGP container which is dumb, but should work in theory. Then you can use localhost in NGP.

That will not solve OPs problem.

Probably an SFF PC off ebay for $60 or so + a 10G NIC. Could run Opnsense, or OpenWRT if you wanted to.

Extremely unlikely that wifi would affect it.

More likely a software crash or a hardware issue.

My benchmark is kinda "how annoying or disruptive would it be if it broke and I didn't feel like fixing it for a few days"

So email for example, I could selfhost, but I'd rather just have someone else do it so I don't have to worry about it.

Bitwarden has never been breached AFAIK

Password managers are a HUGE target, and while I'm sure they do everything possible to prevent a breach from actually obtaining peoples passwords, vulnerabilities do happen.

That's why I think self hosted Bitwarden or KeePass with a file are the way to go.

Watchtower itself works great, it doesn't need a GUI for what it does.

But updating containers in general, either manually or automatically, always carries a risk of something breaking due to the new update.

One thing you can do is make sure you're not using :latest tags in your compose files, and instead pin major versions like postgres:13

And of course make sure you have backups going back multiple points in time in case something does break, and test those backups!

Only when I'm installing/removing hardware. Probably like once a year on average.

Backblaze B2 with Cloudflare? Designed for CDN use, and is $6/TB with free data transfer between B2 and CF.