Check the permissions/owner of the authorized_keys file. I’m not at home right now to give you the path to it, but I have had a similar problem after I add a new ssh key to my gitea/forgejo account. It turned out that in doing so, sometimes the permissions change and gitea/forgejo then refuses to use the file. You should see warnings about this in the logs.

In my case the problem is probably rooted within the uid/gid thats used inside the container and/or the nfs mount I use for the container volume. I never bothered to get to the bottom of it though.

$10/month just for a static website is a lot, especially with free alternatives out there.

What’s wrong with Librewolf? I’m currently using Firefox and thinking about switching.

I’m thinking about just doing something outside kubernetes that just copies the data from the directory that NFS provides to another storage.

This is what I’m doing for the most part. A TrueNAS server provides the NFS shares and periodically backs them up with restic.

Some apps don’t like NFS very much, especially those that require SQLite. If you’re running Jellyfin over NFS you probably know what I mean. For those apps I use Ceph instead, which is highly available and a lot faster but also more complicated. Those PVCs I backup from within kubernetes to S3 storage with velero.

Uhhh, git add -p?

I use Promtail + Loki + Grafana to monitor application logs. Promtail scrapes logs, Loki stores and indexes them and Grafana can query Loki with LogQL and also send alerts.

Apparently Promtail is superseded by Grafana Alloy, which I don’t have experience with.

Anyway, I set this up mostly for fun and to preserve logs of terminated pods in my kubernetes cluster. I don’t have any alerts in place, but I probably could.

https://grafana.com/docs/loki/latest/