I tested it once and it didn’t really impress me. Perhaps you can try using something like Grist.

I mean, you could do it using foreign data wrappers.

EDIT: It has been done before https://www.cdata.com/kb/tech/excel-jdbc-postgresql-fdw-mysql.rst

There is actually an open source alternative for that in the Libreoffice suite called “Base”

“Building for Developers- Not imitators” | MongoDB

At MongoDB we believe in fair competition, open collaboration, and innovation that empowers developers. Our work has popularized the document database and enabled millions of developers to build modern, scalable applications that power some of the world’s leading companies. We welcome competition that drives progress and expands developer choice.

But that only works when everyone plays fair, which, unfortunately, isn’t always the case.

On May 16th, we asked FerretDB to stop engaging in unfair business practices that harm both MongoDB and the broader developer community. We believe that FerretDB has crossed two distinct lines:

…

People didn’t like this one

It is not. The source is linked in the post.

I’ve just disabled all incoming connections (including SSH etc.) and access everything through WireGuard

Thanks for checking

Counterpoint

The VPS I’m using unfortunately doesn’t offer an external firewall

I also ended up using firewalld and it mostly worked, although I first had to change some zone configs.

Yes, you can fix it by doing this

echo "Adding rules for Docker subnets to allow communication between containers..."
for subnet in $(docker network inspect bridge -f '{{range .IPAM.Config}}{{.Subnet}} {{end}}'); 
    sudo ufw allow from $subnet
    echo "Added rule for $subnet"
done

I don’t mind CoC’s that much, but I do really dislike Discord server rules that all have the same 10 completely obvious points and then make you search for a password in the rules. I don’t see how having to look for a password in 3 pages of rules that says doxing is bad and being nice is good is going to filter out anyone but the impatient.

Portainer Docs | Install Portainer CE with Podman on Linux The official docs also mention doing that.

Also when using a rootfull Podman socket?

Do you mean a hardware firewall?

That caused issues with Docker containers being unable to communicate with eachother for me.

This is less of an issue with JS, but say you’re developing this C++ application. It relies on several dynamically linked libraries. So to run it, you need to install all of these libraries and make sure the versions are compatible and don’t cause weird issues that didn’t happen with the versions on the dev’s machine. These libraries aren’t available in your distro’s package manager (only as RPM) so you will have to clone them from git and install all of them manually. This quickly turns into hassle, and it’s much easier to just prepare one image and ship it, knowing the entire enviroment is the same as when it was tested.

However, the primary reason I use it is because I want to isolate software from the host system. It prevents clutter and allows me to just put all the data in designated structured folders. It also isolates the services when they get infected with malware.

It’s okay for simple things, but too simple for anything beyond that, IMO. One important issue is that unlike with Portainer you can’t edit the container in any way without deleting it and configuring it again, which is quite annoying if you just want to change 1 environment variable (GH Issue). Perhaps they will add a quadlet config tool to cockpit sometime in the future.

ufw just manages iptables rules, if docker overrides those it’s on them IMO