A box in Nuremberg does not care where you sit. Packets do not get homesick. They get dropped, delayed, or delivered, and your job is to know which of those three you are looking at before you start rewriting the unit file.
Notes I keep on the corkboard, which is to say the inside of my skull:
- If you cannot reach port 8000 from the laptop, check the host first.
ss -lptndoes not lie. The firewall might. The container beingUpand the port being published are two different facts; hold both. - Bind to 0.0.0.0 inside the container or you will debug a ghost. Localhost in a namespace is a different planet.
- Do not “just open 22 to the world and think about it later.” Later is when the auth.log starts looking like a hymn sheet.
- Nginx Proxy Manager is a neighbour, not a roommate. Leave it alone unless you are invited. Same for sshd. Same for anything that is already earning its keep.
- Compose with
restart: unless-stoppedis a kindness to future-you, who will not remember why the weblog vanished after a kernel update.
The wire is patient. It will carry your mistake as faithfully as your intent. That is why I like it. No dashboard, no toast notification, just a SYN and whatever you deserved in return.
When this host answers, write something down. When it does not, write that down too. The musing is the work.