Thanks to image-based distros like Fedora Atomic, I skipped the asking to update step. They download and apply updates in the background, and then the new image gets selected on next boot.
Given Fedora doesn’t do major changes in point releases, nothing breaks (until I do a manual upgrade to a new (half-)yearly major release).
Not having a terminal does not make sense (unless in a business context). For some people (my mum) it’s as if it doesn’t exist anyway, so why remove it.
I remember taking my first selfhosting/Linux steps a year or so after the launch of Let’s Encrypt with a Pi 3. At the time, most tutorials didn’t set up https at all, and if they did, they were self signed certificates (resulting in browser warnings).
Self-signed certificates are annoying and creating them was a series of copy pasting long, weird commands, usually using long exspiration dates (manual renewing sucks).
Not long after, guides started recommending certbot. Nowadays reverse proxys like caddy set up TLS automatically.
At least that’s how I remember it, given my complete lack of knowledge about Linux at the time.
Yes, the restriction to a single VPN client is annoying.
Blocking ad/telemetry domains can be done by adding Adguards DNS servers in the OS settings. Sadly blocking apps Internet permissions completely is not possible (except on OS like LineageOS, CalyxOS or GrapheneOS).
Symphonium is a great Android music player which connects to a Subsonic or Jellyfin server (or any other protocol like SMB).
Navidrome is a music server which implements the Subsonic protocol. This means apps like Symphonium can connect to it.
Any old PC is enough, even a Raspberry Pi is fast enough for a music server.
Anything more like SSL (https) and a domain is optional for getting it working, and only a benefit if used outside of your home network. Using Tailscale makes a domain/SSL unnecessary and also no longer needs messing around with networking (e.g. no opening ports on the router).
Yes. 1TB SSDs can be bought new for 50€, 500GB for even less. For some people this is expensive depending in the region (e.g. I also know someone who uses an HDD). But given the price of other pc parts it isn’t something to cheap out on (a 1TB/2TB HDD is also 50€).
The survey was originally sent out on reddit /r/selfhosted, so I expect most respondents are from there.
Global hotkeys have been addressed on KDE, but no applications actually support it — one of the reasons being that no other desktops support it. Typical chicken-egg problem.
No, I haven’t connected a Pi to a 4k TV.
FreeTube does not have controller support, and for AndroidTV I’d recommend SmartTube.
Kodi/LibreELEC is able to do all of it, but IMO it’s not a good experience for browsing YouTube and I don’t know how well the third party Steam Link integrations work.
This is why I’d also recommend LineageOS Android TV, which supports Pi’s thanks to konstakang. But I’m not sure why it’d work better than a FireTV stick, since both run AndroidTV.
Edit: I’ve had an issue where the Pi 5 wouldn’t boot AndroidTV, until I tried to turn it on again after a few weeks. So I’d recommend sticking with the FireTV + SmartTube + Jellyfin + Steam Link (unless you’ve got a Pi 5 lying around anyway).
Edit 2: The Pi 5 + Android TV had issues with HDMI-CEC of the TV, so I had to buy a remote with a USB adapter. This sends the wrong signals (e.g. keyboard enter, not what Android TV expects), which is fixable with some app remapper. Maybe it’ll work better for you, but the FireTV is likely the easier solution.
Yes.
If VPN’s actually won’t be able to protect its users from copyright claims anymore, there’ll still be anonymisation networks like I2P (at least so long as encryption isn’t banned).
Yes, it’s slow atm, but if it was included in more torrent clients and enabled by default, speeds would likely get better.
Because they use the official apps/web-vault, they don’t need to implement most of the vault/encryption features, so at least the actual data should be fine.
Security audits are expensive, so I don’t expect it to happen, unless some sponsor pays for it.
They have processes for CVEs and it seems like there wasn’t any major security issues (altough I wouldn’t host a public instance for unknown users).
Vaultwarden is one of the few services I’d actually trust to be secure, so I wouldn’t worry if you update timely to new versions.
Yes, Bitwarden browser plugins require TLS, so I use DNS challenge to get a cert without an open port 80/443.
The domain points to a local IP, so I can’t access it without the VPN.
Having everything behind a reverse proxy makes it much easier to know which services are open, and I only need to open port 80/443 on my servers firewall.
Fully agreed.
Accessing Vaultwarden through a VPN gives me peace of mind that it can’t be attacked.
Another great thing about Bitwarden is that it’s possible to export locally cached passwords to (encrypted) json/csv. This makes recovery possible even if all backups were gone.
Great to hear you found my comment helpful.
Just make sure you make backups regularly. Especially with used drives, I wouldn’t count on them surviving the stress of a rebuild. If a second drive fails in a RAID10, all data might be gone.
Edit: I’d be thankful if you could report back how the test goes. I need a drive for a backup ;) and I’m considering buying from eBay too.
I will test them upon receiving and see how it goes from there:)
I don’t know where exactly you live, but if your in the EU customs/taxes + shipping will make the deal worse, but better than expected.
E.g. for Germany, this drive would cost 382€ with UPS Saver Duties & Taxes included, instead of 273€ for the drive itself.
I’ve found the same drive with a local commercial eBay seller for 420€, including taxes and shipping.
A new 24TB drive would cost 485€.
Edit: IMO a better deal would be 22TB drives, which have the same price per TB but are new. But then again, their used/recertified price is also ~10% lower than new.
Why LVM + BTRFS instead of only using btrfs? Unless you need RAID 5/6, which doesn’t work well on btrfs.
This does not apply to difficult projects like emulators.
E.g. suyu, a yuzu fork, does not seem to get much development. Most of the changes are build or documentation related. [1]
Those emulators will work fine for the currently supported games, but without new competent people (trying to stay anonymous), I don’t see how these emulators will improve.
Podman provides stronger isolation than nixos-containers because the latter only supports rootful containers. Losing access to nixos modules is a disadvantage, altough most services I’d use podman containers for don’t have any modules anyway.
E.g. I’ve used nixos container as a stop gap to use a major beta, because I didn’t manage to adapt the nixos package accordingly.