I honestly don't see how my issues are related to docker. Sure the occ app was missing (or I just couldn't find it, but the conclusion was that I didn't even need it)
I'm running Linux so there's not really any inefficiencies in regards to resources AFAIK - it's just namespaces and cgroups.
No problem! It's good software but I've honestly been burned by applications that only keep this kinda stuff in databases. If you do daily backups/exports it's probably OK but I don't trust myself not to fuck it up.
I just don't see how docker can fuck something like this up honestly, the only thing that can be screwy is permissions when dealing with filesystem mounts - but once you've got that working it should be pretty static.
It's the LSIO image hooked up to seperate (but also docker) postgres db that's also used for other apps. The data and config directories are bind mounts to the local filesystem. It connects to a samba share via the external storage plugin. It is exposed to the internet through a caddy reverse proxy though (the database isn't)
I'm also a develop and my philosophy is that stack traces are for the developers but they should be translated to informative error messages for the user. Otherwise you're doing security through obscurity.
I'm using the LSIO docker image and I could not locate the occ file to fire off the reset - but even then - I didn't need to reset my password anyway..
Not sure if I completely understand but I think you want public service 1 accessible on subdomains s1.domain.com and internal service 2 on s2.domain.com?
Just point the A record for s2 to an internal ip address (or a tailscale ip). The only thing dns does is translate a (sub)domain to an ip address. So outside of your network s2.domain.com wouldn't resolve but inside your network it would.
I honestly don't see how my issues are related to docker. Sure the occ app was missing (or I just couldn't find it, but the conclusion was that I didn't even need it)
I'm running Linux so there's not really any inefficiencies in regards to resources AFAIK - it's just namespaces and cgroups.