We use forgejo at work and the runners usually do the trick. You cab have them run any shell command you want, manage secrets and the syntax is the same as on github.
Black616Angel
joined 2 years ago
I think you flll for sarcasm.
Edit: Okay, I saw your other post, ignore this answer. It won't work.
Just to give you another way of doing it, I propose using "a third party provider" for your DNS, which you said you didn't want, but since I think it could still work, I tell you how it would work:
Duckdns is a free provider for DNS and let's you create standard certificates via let's encrypt without exposing the rpi.
You can register for free and just input your local IP for the raspberry e.g. at charger8283.duckdns.org
Since the IP is local, no one outside your network can access it, but because the URL is registered globally, you can get a certificate using nginx proxy manager.
This would result in https traffic, that never leaves your local network and is also free.
Lemmy also allows you to edit your post afterwards, so you could still do it.
Please don't call yourself stupid. The common internet slang for that is ELI5 or "explain [it] like I'm 5 [years old]".
I'll also try to explain it:
Docker is a way to run a program on your machine, but in a way that the developer of the program can control.
It's called containerization and the developer can make a package (or container) with an operating system and all the software they need and ship that directly to you.
You then need the software docker (or podman, etc.) to run this container.
Another advantage of containerization is that all changes stay inside the container except for directories you explicitly want to add to the container (called volumes).
This way the software can't destroy your system and you can't accidentally destroy the software inside the container.