I would do FDE yeah. My current laptop setup is with systemd-boot and a special initramfs that allows me to unlock it with a yubikey, with fallback to password. Fair warning, this exact configuration is not particularly easy to setup.

There are also modules which enable early network connectivity along with a SSH server, meaning you login and unlock it remotely. I have not tried this.

Debian does not frequently require rebooting under normal circumstances. Kernel updates are not that frequent, and you can usually put it off for a bit if you don’t want to deal with it.

Congrats! I just got a similar running on Arch with a 5700 XT. When I looked at it a couple years ago, it wasn’t really possible. Now, smooth sailing.

MS and other corps love MIT and related licenses because they can just take the code and basically do whatever with it in their projects, so it makes sense for them to promote it. Generally speaking, they won’t touch GPL/AGPL as it would force them to distribute their source.

I believe it was a very intentional choice to use a permissive license for Rust. If they hadn’t, it would not have been as popular as it is today, nor would it have big money behind it. https://rustfoundation.org/members

Yeah, you can turn off registration without a token. Then, if you want someone to register you can issue them a registration token, or manually create their account.

Federation can be turned on, on a case by case basis.

You can set rooms to invite only and not discoverable. Alternately, you can use an invite-only space that allows users to join rooms from there.

The first two parts are done in the server config, see the synapse docs. The last is done once the server is setup and running as an admin.

To start small setup a static website behind nginx. This requires you to create a basic website or copy a template, it goes somewhere in your filesystem, in linux /var/www is common. Once you have that, setup the nginx service and point it to that location. You can do this locally then expose it to the net or put on a VPS. Here is a dead simple guide presuming you have a remote server: https://dev.to/starcc/how-to-deploy-a-simple-website-with-nginx-a-comically-easy-guide-202g

Once you have that covered, ensure you know how to setup ssh keys and such, then install, configure, and run services. From there, most things are easy outside of overly complicated configurations.

I happened across this tool to help you create configs, it looks pretty good, easier than piecing together all the parameters separately: https://www.digitalocean.com/community/tools/nginx

Seems like it has directions for certbot and generating dhparams, etc. as well.

For something like that, you’d want a VPS with 2-4 cores, 4 GB RAM, 80 GB SSD. Any less and you’ll start to run into problems when adding bridges and stuff.

So, it’s really a matter of what deals you can find in that bracket, and if you care about the geographical region it’s hosted in. Usually https://lowendtalk.com/ is a good place to start looking at options.

I think what you have is fine, and wouldn’t worry about it too much.

That said, I run unbound with pi-hole, directing the dns queries through a wireguard tunnel. It’s a bit slower, but I do like having my own recursive DNS, especially with news that more and more services are implementing DNS level blocking.

Fixed, thank you

Thought I’d throw in some things I’ve been using.

• yetCalc - it’s a calculator
• Vector Camera - novelty camera app which can make it look like you’re in the matrix
• Leon - The URL Cleaner
• Libera Reader - document viewer
• K-9 Mail - it’s thunderbird mobile now
• Imagepipe - image editor / exif cleaner
• Gauguin - sudoku like puzzle game, configurable difficulty
• Feeder - rss reader
• AntennaPod - podcast manager / player
• Element - flagship matrix client
• AdAway - host based ad blocking (requires root)
• Ente Auth - MFA

You can also just copy your thunderbird profile directory, if it’s the same OS, to a different system and it seems to just work. I did this to copy the whole setup and synced mails from desktop to laptop. I also tried this from Windows -> Linux and it did not like that, so I used the import profile feature and re-entered all the passwords.

I’ve used Ansible to deploy docker compose and it worked pretty well. You will have to do some learning if you aren’t familiar with it, but I’d say it’s worth it.

Like others, I would not recommend Jenkins.

I would recommend ImagePipe. It’s been around a good while and is feature rich.

It sounds like you are having trouble with tonemapping HDR to SDR on the fly. This is a non-trivial task, but not impossible. Both mpv and ffmpeg (which plex and jellyfin use) are capable of this. If you install mpv, it will by default do the tonemapping, you can enable/disable this or force use of a particular algorithm if you like.

To answer your question: Plex has been pretty shitty for years now, and it’s only getting worse. They just don’t care for their user base.

ETA: Jellyfin also already does what you want, I think?

Second this. Mailcow very easy to setup, though the docs could use improvement. This might have changed already.

That said, I found it easier to pay for a domain and email service where they worry about reputation and random microsoft blacklists.

Gitlab uses a ton of resources and is a pain to setup. Once you get it going, it’s fine.

Going to echo what others have said: Use Gitea or Forgejo instead if you can. Both have runners you can setup like gitlab, but they instead mimic github actions instead of gitlab ci/cd.

I run a semi-private gitea instance, and have not had any problems past the initial setup in 2+ years.

Media server client, pihole, emulation, programming or home automation project. You could even prop it up as a standalone web server and make some kinda creative thing.

It’s feasible as long as all the stuff you want to auth supports oauth, oidc, or saml. It might be a bit overkill for your use case, unless you have a bunch of services you didn’t mention. Keycloak has a bit of a learning curve, but works great once you get past that.

Good question. I chose it initially because it was open source and way easier (in my eyes) than Apache. I don’t recall the others being an option at the time, or I was not aware of them. nginx does what I need without complaint, so I haven’t switched.

Something like radicle?

https://radicle.xyz/