Migrated my Git forge (Forgejo) and my personal website (hofstede.io) to a new server, running on Red Hat Enterprise Linux 10 (RHEL)
.
All services running as Podman containers
- Traefik reverse proxy
- PostgreSQL Datebase
- Littlelink (my website)
- Forgejo
During the migration, I did several optimizations:
1. Converting all container definitions to quadlet files (/etc/containers/systemd/*.container)
2. Modernizing my Traefik configuration according to good practices (global TLS redirect, modern ciphers, etc)
3. Securing the system with firewalld, SELinux (enforced mode) and Anubis (Anti AI Crawler filter)
4. Using podman secrets for all sensitive informations (DB credentials)
Very satisfied with the result. My container definitions are now much clearer, follow a structure and are pretty consistent :-)