I reworked my servers a while ago to host literally everything through docker, managed via terraform.
All web-services are reverse-proxied through traefik
At home:
loki + cadvisor + node-exporter + grafana + prometheus
syncthing
tinc vpn server
jackett + radarr + sonarr + transmission
jellyfin
samba server
calibre server
loki + cadvisor + node-exporter + grafana + prometheus
syncthing
tinc vpn server
dokuwiki
firefox-sync
firefox-send
vscode server
bitwarden
freshrss
znc bouncer + lounge irc client + bitlbee
an httptunnel server (like ngrok)
firefly iii
monicahq
kanboard
radicale
syncthing
wallabag
tmate-serverI see you're using Bitwarden.
Does anyone have recommendations for password+sensitive-data management?
I'm currently using Keepass and git, but I have one big qualm. You cannot choose to not version-control that one big encrypted (un-diff-able) file.
You might like Pass [0] or GoPass [1] which had more features the last I looked at it.
They both store passwords/data in gpg-encrypted files in a git repo. I'm not sure what the state of GUIs/browser plugins are for it, but I'm pretty sure there are some out there.
You can also set up your git config to be able to diff encrypted .gpg files so that the files are diff-able even though they're encrypted.