Biuebubbles is based. I was running on an old Mac mini then switched to a vm on my server (spoofing the hw info from the Mac mini) for Ventura + lower power consumption.

I use an old iphone to link my phone number, but will eventually switch to pypush as a way or registering without the iPhone

I prefer compose merge because my “downstream” services can propagate their depends/networks to things that depend on them up the stream

There’s an env variables you set in .env so it’s similar to include

The one thing I prefer about include is that each include directory can have its own .env file, which merges with the first level .env. With merge it seems you’re stuck with one .env file for all in-file substitutes

Optiplex with an i5 8500. Before that was using a celeron that used like 6w max

Since switching my server to an x86 based platform, I’m not jumping back to arm any time soon. Maybe some day

I do this using a native Linux host so Google corals work right for my frigate security system. Windows vm is a qemu KVM with GPU passthrough, managed primarily through a web browser via cockpit https://qqq.ninja/blog/post/vfio-on-arch/

Last time I came across your post I tried it and found the window was constantly freezing on windows. Gonna give it a try tomorrow, hope it’s solid!

I think 8000 series is the suite spot. I’ve gotten a few optiplexes between $110-140 with an i3-i5

That’s a crazy issue to have discovered. Maybe you could try a different reverse proxy like nginx to narrow down potential causes for the issue

I started up setting up authelia this week so I could have 2fa on immich, then stopped when I learned it doesn’t have built in ldap. So I set up authentik and it’s been solid enough so far

Port management redirects to privacy settings? That’s not right. I’ve had google routers for like 5 years now and multiple family members also have them. Most reliable routers I’ve owned to date, haven’t had a need to upgrade

Also you can host multiple services through the same port. This is typically done through port 443, using a reverse proxy

Definitely going to give this a try

What’s the advantage of this over

sudo tar -czvf /backupFile.tar.gz folder/to/backup/ gpg -o backupFile.tar.gz.gpg --symmetric backupFile.tar.gz

Have you tried frigate? Or iSpy agent dvr?

To be fair, OpenVPN was annoying to setup. But with wg-easy docker, I’d argue it’s faster to set up than tailscale and no accounts necessary. You do need to forward one port

I definitely spent a good hour setting up tailscale on my GF’s mac and had to fiddle with non-advertised cli options to expose local services from other machines. However, wireguard on a mac is supposedly hard to set up compared to tailscale

Do you think there’s any advantage to use SSO if all your external facing services already have built in 2fa (ex. Nextcloud). I use vaultwarden so it’s not like any passwords need to be remembered. Just seems like extra setup