This push for “secure browsers” (unspecified attack vectors) sounds like a good way to discredit privacy-friendly options and chrome alternatives. This gotta be a coincidence, all these “Muh security” out of nowhere. It can’t possibly have anything to do with manifest v3, right?

Dad is that you? :D

Unfortunately he bought a “modern” HP a few years back. It’s a nightmare.

I switched to running docker inside wsl2 (installed as per their docs) and so far it’s been working well.

Storage is an unsolved problem in 2024. NIMBY and some old storage facilities are failing, a problem for our kids to solve and pay for. I’m a nuclear proponent or I used to be one, but this ship has sailed for good.

Legend, thank you!

Since you mentioned MLC, maybe you have some suggestions for eg used server grade disks? Would the Rpi be able to run something like the Intel datacenter SSDs eg S3700? The power loss protection is really something I would like to have, especially in a homelab scenario. Or any other notable MLCs with larger capacities? I am having trouble finding a good list sorted by max potential storage.

Log2ram is a service which keeps your log files in RAM, avoids the constant writes to disk and really helps with SDcard longevity. Probably helps with SSDs too.

You can just Google it and check out the github page, no need for LLM accuracy lottery

I do not have to share passwords with 10-50 people and neither did the op imply this. I am having trouble figuring out the reasoning behind your message. Why would this be a normal use case?

I mean this comment well. You seem to be clueless about the problems open source projects are facing. Free work and hopefully the maintainer doesn’t burn out before he can hand the torch to another person.

Are you not aware of the countless issues with absolutely unsustainable open source projects out there in the wild?

We need a cultural change and a way to normalize supporting and paying (whoever can afford to) for good open source projects.

I am importing my externally synced and managed library to immich. It does not create any structure or edit the files.

Yes, a thousand times this. DeSEC is awesome, I moved my domain record management there. I’m usually buying domains on namecheap, and the IP allow list thing for the API was just too annoying to deal with.

This is great, I really have to dig out my painting supplies I ordered a few years ago. I started with acryl so I practice a bit before switching to oil, then RL happened and between “no time” and “I need better lightning” / “research about safe non toxic paint cleaner” I kinda forgot about it.

Do you have any modern guides with “just get this and don’t overthink it” that you can recommend? With a kid at home I don’t really wanna stress too much about toxic paint etc.

Keep painting 👍👌

This, letsencrypt with dns challenge, https://desec.io/ to manage the dns records https://github.com/go-acme/lego or traefik to manage the certificates and do the dns challenges for you.

Tell me you don’t live in Germany without telling me you don’t live in Germany :D

Ja das ist einfach peinlich, vor allem wenn man angesprochen wird und nichts unternimmt. Rücksichtslos ist hier viel zu nett formuliert. Bei uns parkt immer wieder einen Camper / Transporter direkt an die Kreuzung neben eine Kita, blockiert den Gehweg und man sieht hinter dem Auto einfach gar nichts. Überqueren mit einen Kind ist da einfach nicht lustig. Ich freue mich auf jeden Fall auf den Urteil, und bin gespannt, ob die Schwiegereltern auch das anmeckern. Wieso Gehweg kein Parkplatz mehr ist 😯

Ich mache mich jetzt absolut unbeliebt,check this out: Ich habe lange Jahren meinen Motorrad auf dem Gehweg geparkt, bis zum ich einen Stellplatz bekommen habe. Auf die Straße habe ich es nur eine kurze Zeit ausprobiert. Nachdem mehrmals alles von riesige SUVs, bis falsch geparkten Miles Transporter weniger cm von meinen Motorrad standen, habe ich das aufgegeben. Man wird nicht nur dumm angeguckt (ich nehme nämlich Autofahrer auch den Parkplatz weg!), der potential für materielle Schäden ist enorm.

Und natürlich gibt es in den ganzen Viertel nur ein paar dedizierte Parkplätze für Mofas und Motorräder.

Also schön ist es nicht, und viele andere hier machen das auch. Meistens nimmt man Rücksicht und blockiert kein effektiv nutzbare Teil vom Gehweg. Manchmal aber auch nicht. Ich hätte mir hier generell weniger Autoplätze gewünscht, und ein paar davon könnte man für Mofas opfern. Leider ist hier sogar die SPD gegen die zErStÖruNg und es bleiben nur die Grünen mit den vernünftigen Vorschläge.

Edit: ich wollte nur eine andere Perspektive geben, falls das jemand interessiert :)

Running ZFS on consumer SSDs is absolute no go, you need datacenter-rated ones for power loss protection. Price goes brrrrt €€€€€

I too had an idea for a ssd-only pool, but I scaled it back and only use it for VMs / DBs. Everything else is on spinning rust, 2 disks in mirror with regular snapshots and off-site backup.

Now if you don’t care about your data, you can just spin up whatever you want in a 120€ 2TB ssd. And then cry once it starts failing under average load.

Edit: having no power loss protection with ZFS has an enormous (negative) impact on performance and tanks your IOPS.

This, just pgdump properly and test the restore against a different container. Bonus points for spinning as new app instance and checking if it gets along with the restored db.

I know what you mean. Most people mean well, some are a bit too aggressive, but probably also mean well. I honestly sometimes roll my eyes when I start reading about tailscale, cloudflare tunnels etc. The main thing is not to expose anything you don’t absolutely need to expose.

For access from the outside the most you should need is a random high port forwarded for ssh into a dedicated host (can be a VM / container if you don’t have a spare RaspberryPi). And Wireguard on a host which updates the server package regularly. So probably not on your router, unless the vendor is on top of things.

Regarding ansible and documenting, I totally get your point. Ten years ago I was an absolute Linux noob and my flatmate had to set up an IRC bouncer on my RPi. It ran like that for a few years and I dared not touch anything. Then the SD card died and took down the bouncer, dynDNS and a few other things running on it.

It takes me a lot of time to write and test my ansible playbooks and custom roles, but every now and then I have to move services between hosts. And this is an absolute life saver. Whenever I’m really low on time and need to get something up and running, I write down things in a readme in my infra repository and occasionally I would go through my backlog when I have nothing better to do.