Crowdsec has default scenarios and lists that might block a lot of it, and you can pretty easily make a custom scenario to block IPs that cause large spikes of traffic to your applications if needed.

Basically everything. Self hosting doesn’t rely on public access.

Check the logs for the containers and see what the issue is first. Then go from there.

100% reliable so far, I’ve bought about 10 of them I think over the past 8 years or so. Some are in RAID 1 arrays, and some just on their own for backups and such.

The main thing is buy from a local shop or online place like serverpartdeals.com and not Amazon or other online marketplaces.

All my stuff is backed up several ways every night (which should be done no matter what drives are used) so it’s not that big of a deal if they failed suddenly.

At that point I’d just use one of the tools to bypass checks. Would still have legitimate licenses and everything.

Libreoffice with the ribbon interface looks about the same to me.

OnlyOffice is basically an electron browser app IIRC which is why the performance is so poor.

That won’t migrate watch history

Did you try any of the sync extensions?

Ease of use mostly, one click to restore everything including the OS is nice. Can also easily move them to other hosts for HA or maintenance.

Not everything runs in docker too, so it’s extra useful for those VMs.

A couple posts down explains it, docker completely steamrolls networking when you install it. https://forum.proxmox.com/threads/running-docker-on-the-proxmox-host-not-in-vm-ct.147580/

The other reason is if it’s on the host you can’t back it up using proxmox backup server with the rest of the VMs/CTs

Regardless of VM or LXC, I would only install docker once. There’s generally no need to create multiple docker VMs/LXCs on the same host. Unless you have a specific reason; like isolating outside traffic by creating a docker setup for only public services.

Backups are the same with VM or LXC on Proxmox.

The main advantages of LXC that I can think of:

• Slightly less resource overhead, but not much (debian minimal or alpine VM is pretty lightweight already).
• Ability to pass-through directories from the host.
• Ability to pass-through hardware acceleration from a GPU, without passing through the entire GPU.
• Ability to change CPU cores or RAM while it’s running.

Dockers ‘take-over-system’ style of network management will interfere with proxmox networking.

Is it just you that needs access? VPN like Tailscale or Wireguard is the most secure option then, as it’s not exposing any services to the internet.

Otherwise a reverse proxy in front of things like Traefik or Nginx, make sure things are automatically updated ASAP, and make sure auth is enabled on the services.