If i remember correctly on my gitea (now forgejo) the default is open registration which really shouldn’t be the case for projects that are targeted towards self hosters.

My inital install was a long time ago so I don’t remember for sure

I don’t use tailscale but this doesn’t make sense.

If the only remote access is via tailscale then chromecast also has to be on tailscale, which isn’t easy to do.

To cast from your jellyfin to another tv, you need to setup a reverse proxy om your server to allow external access to jellyfin.

A lot of threads on jellyfin keep recommending tailscale which is easier to setup but more limiting.

I would recommend searching for tutorials about setting up a reverse proxy like caddy to NPM and then accessing jellyfin though a URL. That way you can give access to other people and also cast to a friends TV.

Same situation for things like immich if you ever want to share an album with a friend.

I ran nextcloud for years on good hardware and its always been the weakest self hosted app I have. I moved to seafile for a bit and then ultimately owncloud OCIS.

OCIS is a modern app that is massively better since its written with modern languages / frameworks

Please put this info on github issues for their to see

Borg backup runs every hour on all my docker folders

I definitely don’t need to but it also costs nothing and retention policy only keeps 5 minute backups for an hour. Then hourly back up for a day. Daily backups for a week, etc. Up to 2 years

Exactly this, I have hourly Borg backups and also since my install is entirely on a zfs array I have zfs autosnapshot every 5 mins with retention policy. Takes almost zero cpu or memory overhead extra and means and can do just about anything via command line and revert it back with ease.

That being said, I still don’t auto update. Unless having an issue, I just sit down every few months and update everything manually because if its already working why update. If you want the newest features, how will you even know what they are if you don’t at least glance at the release notes?

Traekif can reverse proxy just about anything include ssh.

That being said I don’t. For stuff like ssh I connect with wireguard first then ssh. For stuff like immich I directly expose that behind traefik so I can share images with others. For stuff like vaultwarden I have that behind traefik but internal only so you need wireguard first then you connect to vaultwarden.local.domain.com

I’m on version 1.143.1 I skipped all the beta timeline stages and updated from 1.135 I think.

About 30k photos and 2k videos

The web interface was great, the android app (pixel 8) was very slow. Even local assets were slow.

Since update, its way faster. Feels really good, responsive, low latency. Sync and backups have been no issue at all.

Sync on android turned itself off after updating, but I turned it back on, selected the same folders to watch and it processed for a few mins and then everything continued to work with no issues.

On the previous version, sync was pretty good. Sometimes it didn’t trigger as a background process and i had to manually open the app but it worked. New sync also works well though haven’t yet uploaded a large number of things.

The main feature I want is portion scaling. So I can type the number of servings and everything gets multiplied. Is that possible in obsidian via a plugin or with mkdocs?

This is great. Thanks!

Couldn’t the attacker just drop a dangerous binary into the data volume then?

How would you add new links if its read only?

I’ve been using this which works great.

https://f-droid.org/packages/com.sbv.linkdroid/

Works with my single sign on setup as well which was critical. Creates a nice share target on android so any share button gives the option of sending the link to linkwarden

One thing to consider is that once zfs is setup there really is no significant intervention that is needed. I probably haven’t done anything to my proxmox zfs array in years.

I know its almost a meme to say just learn command line, but unfortunately in this case it will really help you understand what is happening and it also just takes a few commands to setup up once and then never worry about it again.

After the inital setup, the zfs GUI will be pretty much unused.

For commands I don’t use often, i use a note taking software to keep track of commands I used during setup because years go by before I use it again. I find the GUI often changes in that time making it harder to replicate whereas command line is the same and easier to document.

Keeping 80 open is useful so that traefik can redirect all traffic to 443 (https)

Any idea if gluetun does this by default? A popular setup is setting the network mode on the application docker to the gluetun service and then gluetun itself says it has a killswitch built in. I assume they did that well since its very popular and this is pretty much the main purpose of the container.

I didn’t know what this was until now. It seems like the beta bitwarden app supports this. Would be interesting to get it setup for that.

This along with borg warehouse is the GOAT setup. Many others exist of course.

Borgbase for offsite backup as well. Has been rock solid and I test download files from there every now and again with no issues. Never really did a full restore since its my 3rd line backup

I used this years ago. I had issues with repeated database corruption. Google search showed lots of people with similar issues.

I moved to borg backup which has been great.