folekaule

I know it's ELI5, but this is a common misconception and will lead you astray. They do not have the same level of isolation, and they have very different purposes.

For example, containers are disposable cattle. You don't backup containers. You backup volumes and configuration, but not containers.

Containers share the kernel with the host, so your container needs to be compatible with the host (though most dependencies are packaged with images).

For self hosting maybe the difference doesn't matter much, but there is a difference.

Try to come across friendly without sounding condescending.

First, empathize (I know those things can be tricky, it took me a minute the first time), then offer to help without judgement (I have some experience with these, would you like me to try?), then back off if they say no.

If they refuse help, you've done what you can, end of story. Don't be pushy.

Key point here is to be nice about it. Don't call them out or make them feel dumb. Don't judge. You don't know why they're not getting it, and next time maybe it is you who is "dumb".

Also, don't expect everyone to share your intellect (it's obvious to you) or curiosity (you want to know how it works). Most people just want their problem fixed and move on.

See if a light weight kubernetes installation is for you. Secrets are first class citizens in k8s. You can maintain secrets in a number of different ways, but they are exposed to containers the same way. They can become files or environment variables, whether you need.

I recommend looking at k3s to run on your Pi and see if that works for you. You can add vault software on top of that later without changing your containers.

Instead of calling tech support they should have checked on expertsexchange.com first.

I have one of my domains on Cloudflare and was thinking of moving the rest of them there. What makes it harder to move name servers away from Cloudflare than other places?