That post seems to be missing.
qjkxbmwvz 113 points a year ago

go2rtc, a camera streaming tool that's useful for security cameras, at least has some humor in their choice --- port 1984, of course.

path: 0 18361219, hotness: undefined, score: 113, children: 2
dejected_warp_core 31 points a year ago

Okay, that's pretty good.

path: 0 18361219 18361874, hotness: undefined, score: 31, children: 0
muntedcrocodile 14 points a year ago

Whatever dev came up with that was probably very proud.

path: 0 18361219 18372605, hotness: undefined, score: 14, children: 0
30p87 30 points a year ago

Unix sockets all the way. The only open ports for web traffic should be the reverse proxy (so nginx).

path: 0 18357728, hotness: undefined, score: 30, children: 6
passepartout 16 points a year ago

Or Caddy (simpler than and imho spiritual successor to nginx).

Or Traefik (has loads of convenient middlewares for reverse proxy stuff).

Or Apache (if it is somehow better suited to your use case).

path: 0 18357728 18358250, hotness: undefined, score: 16, children: 0
marduk 8 points a year ago

Is haproxy okay?

path: 0 18357728 18358374, hotness: undefined, score: 8, children: 3
floquant 2 points a year ago

haproxy is awesome

path: 0 18357728 18358374 18372893, hotness: undefined, score: 2, children: 0
hperrin 1 point a year ago

Haproxy is great, but setup is hard. It’s more for load balancing than being an easy reverse proxy.

path: 0 18357728 18358374 18383909, hotness: undefined, score: 1, children: 0
Mora -1 points a year ago

Seeing that Red Hat also uses this in OpenShift: no. /s

path: 0 18357728 18358374 18364124, hotness: undefined, score: -1, children: 0
x00z 3 points a year ago

I use docker ports but only allow the loopback like this: 127.0.0.1:11551:80

And then serve that app with the reverse proxy.

path: 0 18357728 18360088, hotness: undefined, score: 3, children: 0
whyrat 29 points a year ago

Doesn't matter; we'll map it to whatever the environment needs in the docker-compose.yaml.

path: 0 18359365, hotness: undefined, score: 29, children: 0
afk_strats 26 points a year ago

All my homies use :3000

path: 0 18359467, hotness: undefined, score: 26, children: 1
anonfopyapper 26 points a year ago

:3

path: 0 18359467 18359552, hotness: undefined, score: 26, children: 0
Mora 25 points a year ago

As long as it is configurable, ideally via env, I dont care about the port.

This could be important for restricted Kubernetes clusters (or certain Gluetun configs). Don't be Nextcloud with their default port of 80 in their Apache image with only hacky ways to change that. God, I hate Nextcloud. They are truly becoming the next Wordpress.

path: 0 18364211, hotness: undefined, score: 25, children: 13
kassiopaea 5 points a year ago

Vaulwarden does this and I'm really frustrated that I have to cap_add NET_BIND_SERVICE in my rootless setup just to make my password server run.

path: 0 18364211 18375037, hotness: undefined, score: 5, children: 2
gray 1 point a year ago

Are you sure you need that? I just added a —user to the docker run and it started just fine on port 80 in the container.

path: 0 18364211 18375037 18383658, hotness: undefined, score: 1, children: 1
kassiopaea 1 point a year ago

I'm using podman, and I don't like the practice of unnecessarily setting UIDs. NET_BIND_SERVICE is exactly the flag it needs to set port 80 and it doesn't potentially complicate accessing the files for maintenance. Does your system have SELinux? If not, that might be why you don't need it lol.

path: 0 18364211 18375037 18383658 18386243, hotness: undefined, score: 1, children: 0
Jakeroxs 4 points a year ago

The docker image you just set the port like any other program.

path: 0 18364211 18374903, hotness: undefined, score: 4, children: 9
Mora 2 points a year ago

Unless I am missing some obvious setting: Restricted Kubernetes doesnt work like that. You have to run the container with a non-root UID (usually something upwards of a million). Non-root users however can't reserve ports below 1025. Nextcloud builds on the default php-apache image which comes with the default apache ports.conf (Listen 80).

So now this has to be overwritten either by making a custom build (which may require creating a custom build pipeline) or by mounting a new config file (e.g. via ConfigMap) else it wont start. Both are an additional update risk which now has to be documented and checked before updating in addition to changes from the normal nextcloud changelog.

Similiar issues probably appear with rootless docker/podman unless you add extra capabilities, which is not possible in restricted kubernetes settings.

path: 0 18364211 18374903 18375240, hotness: undefined, score: 2, children: 8
Jakeroxs 2 points a year ago

I know nothing about k8s, just started with a homelab using primarily docker in an Ubuntu LXC in proxmox and have been using the nextcloud image via docker compose on a different port by simply editing the compose to outwardly point to a different port, inside the docker container my understanding is it all still uses port 80, thereby causing no further issues with the application.

path: 0 18364211 18374903 18375240 18377450, hotness: undefined, score: 2, children: 7
Mora 1 point a year ago

Welcome to the community then :) For rootful Docker you are correct - the inside port can be 80 and you can expose it on whatever port you want (ideally you expose it only via reverse proxy and not by port - I can recommend Caddy-Docker-Proxy for that)

path: 0 18364211 18374903 18375240 18377450 18379413, hotness: undefined, score: 1, children: 6
Vanilla_PuddinFudge 22 points a year ago

adds a one to it

next app...

ports:
 - 8081:8081

Ughhhhh

path: 0 18360220, hotness: undefined, score: 22, children: 0
atomicbocks 20 points a year ago

Psh, we choose 443 and you know it! Just don’t ask me if we correctly enabled HTTPS…

path: 0 18359035, hotness: undefined, score: 20, children: 2
BakedCatboy 8 points a year ago

Back in the day I home hosted shit using http over 443 because my ISP blocked 80 inbound but not 443. It was a little weird but it worked lmao.

path: 0 18359035 18359881, hotness: undefined, score: 8, children: 1
marcos 8 points a year ago

I run ssh over 443 because every network out there seems to block non-http ports.

path: 0 18359035 18359881 18360083, hotness: undefined, score: 8, children: 0
PeriodicallyPedantic 13 points a year ago

I mean, if you're serving over http, that is the port for it

path: 0 18365583, hotness: undefined, score: 13, children: 6
ShouldIHaveFun 13 points a year ago

Isn't it port 80?

path: 0 18365583 18371203, hotness: undefined, score: 13, children: 5
PeriodicallyPedantic 9 points a year ago path: 0 18365583 18371203 18372440, hotness: undefined, score: 9, children: 4
Glitterbomb 12 points a year ago

We apparently could have been using 8008 this entire time for the same thing and we haven't and I'm a little sour now.

path: 0 18365583 18371203 18372440 18372655, hotness: undefined, score: 12, children: 3
ftbd 12 points a year ago

Me & the boys serving http on the boob port

path: 0 18365583 18371203 18372440 18372655 18373676, hotness: undefined, score: 12, children: 2
kibiz0r 12 points a year ago

Call me crazy, but I like default ports to look like default ports. If I want it to stick around, I’ll pick a port on my own.

path: 0 18361759, hotness: undefined, score: 12, children: 0
Epzillon 11 points a year ago

Imagine using 8081 while 8080 is free. Truly criminal

path: 0 18359295, hotness: undefined, score: 11, children: 1
lars 2 points a year ago

You also see a fair bit of 8001 iirc

path: 0 18359295 18379314, hotness: undefined, score: 2, children: 0
RagingRobot 9 points a year ago

I like 6969

path: 0 18375902, hotness: undefined, score: 9, children: 2
brejela 2 points a year ago

4200 or 10420 too

path: 0 18375902 18384138, hotness: undefined, score: 2, children: 0
weirdbeardgame 1 point a year ago

Nice

path: 0 18375902 18379790, hotness: undefined, score: 1, children: 0
napkin2020 8 points a year ago

9090

8888

path: 0 18360505, hotness: undefined, score: 8, children: 0
hperrin 7 points a year ago

That’s because 8080 is the official unprivileged alternative port for 80, the HTTP port. Web developers are usually using HTTP, so this makes perfect sense. If it supports HTTPS, then 8443, though that one isn’t official.

I run a few open source server projects, and they usually default to 8080 for this reason. I have one that uses 8888, and that’s only because it’s meant for temporary ad-hoc servers.

I’m working on an SFTP server, and it will use 2222, because that’s the most common unprivileged alternative port. There is no official alternative for SSH.

path: 0 18383872, hotness: undefined, score: 7, children: 0
CrackedLinuxISO 5 points a year ago

Everyone out here acting like they don't use 9001

path: 0 18364341, hotness: undefined, score: 5, children: 0
zaphod 5 points a year ago

Me: 5000 it is.

path: 0 18359312, hotness: undefined, score: 5, children: 2
jaschen306 5 points a year ago

Arg, my Synology servers are down. Thanks.

path: 0 18359312 18359867, hotness: undefined, score: 5, children: 1
zaphod 4 points a year ago

Hehe.

path: 0 18359312 18359867 18360034, hotness: undefined, score: 4, children: 0
Taleya 3 points a year ago

Can't use 80 or 8080? Lets use 12380!

path: 0 18383269, hotness: undefined, score: 3, children: 0
Empricorn 1 point a year ago

50501?

path: 0 18386514, hotness: undefined, score: 1, children: 0

thanks for using Leebra!

go to feed...