Old PCs are plenty powerful and compatible with everything, but if energy consumption is a major concern, an old phone can work too.

You are 100% right that Android is a very weird Linux and Termux is limited.

PostmarketOS is a project that enables installation of a full upstream Linux onto old phones. Then you can run whatever (ARM-supporting) distro you like on it, without weird kernel limitations.

Lovely meme, but I was disappointed when zooming in.

Here’s an ALIGNMENT CHART ALIGNMENT CHART that I liberated from the corpos:

You’re not advertising 196.x.x.x routes to your tailnet?

Had to DDG that, I could only think of (tofu plan)[https://opentofu.org/docs/cli/commands/plan/]

No idea why you’re being downvoted, it looks like an interesting concept:

https://garbagecollected.org/2017/10/24/the-carmack-plan/

If selfhosting the family chat is not a goal in itself and it’s about privacy or being independent from big tech, just take the loss and go to Signal. Much smoother experience than any self-hosted messenger can provide for now.

The problem with non-PLP drives is that Rook-Ceph will insist that its writes get done in a way that is safe wrt power loss.

For regular consumer drives, that means it has to wait for the cache to be flushed, which takes aaaages (milliseconds!!) and that can cause all kinds of issues. PLP drives have a cache that is safe in the event of power loss, and thus Rook-Ceph is happy to write to cache and consider the operation done.

Again, 1Gb network is not a big deal, not using PLP drives could cause issues.

If you don’t need volsync and don’t need ReadWriteMany, just use Longhorn with its builtin backup system and call it a day.

I tried Longhorn, and ended up concluding that it would not work reliably with Volsync. Volsync (for automatic volume restore on cluster rebuild) is a must for me.

I plan on installing Rook-Ceph. I’m also on 1Gb/s network, so it won’t be fast, but many fellow K8s home opsers are confident it will work.

Rook-ceph does need SSDs with Power Loss Protection (PLP), or it will get extremelly slow (latency). Bandwidth is not as much of an issue. Find some used Samsung PM or SM models, they aren’t expensive.

Longhorn isn’t fussy about consumer SSDs and has its own built-in backup system. It’s not good at ReadWriteMany volumes, but it sounds like you won’t need ReadWriteMany. I suggest you don’t bother with Rook-Ceph yet, as it’s very complex.

Also, join the Home Operations community if you have a Discord account, it’s full of k8s homelabbers.

I am one of those players. It’s not easy to keep my attention on the game, especially when playing online, but I do enjoy it a lot and am genuinely thankful for the game master making this possible.

If your players are not having fun, you’ll notice soon enough: it’s not easy to reserve a 3-hour timeslot regularly.

Pi 4 + USB-connected SSD with Home Assistant OS is the best way to run HA for the vast majority of people.

If you want to run other services beside HA and Add-Ons, you should be comfortable picking your own orchestration method and hardware.

That’s crazy and genius!

“I don’t do cloud computing, I do solar computing”

The way I understand it, there’s 2 use cases for a VPN, with different concerns and providers:

• having access to your private home network from anywhere, through an encrypted tunnel (Tailscale, Wireguard on the router, etc)
• having your outgoing traffic to the internet go through an anonymized exit node so that your ISP can not watch or sell what you are doing (ProtonVPN, Mullvad VPN, etc)

Is Tailscale fit for the second? I thought not, as the exit node is not an anonymized VPN server but one of your own machines.

https://tailscale.com/kb/1017/install

It really is super simple

Interesting approach but looks like this ultimately ends up:

• being a lot of babysitting / manual work
• blocking a lot of humans
• not being robust against scrapers

Anubis seems like a much better option, for those wanting to block bots without relying on Cloudflare:

https://anubis.techaro.lol/

I want to have VPN enabled always on my phone. I want my music app to work on my phone.

But yeah thanks for asking the right questions: I should split tunnel so the music app can go around the VPN obviously!

I don’t need to, I want to. Basic privacy.

We’re currently looking at Qobuz and Tidal. Will keep you updated if Qobuz’ family plan “same household” rule will cause problems with the VPN

No.

It is very different from the usual flat corporate style yes, but this is just their branding. Their blog is full of anime characters like that.

And it’s not like you’re looking at a literal ad for their company or with their name on it. In that sense it is subtle, though a bit unusual.

For anyone wondering what “TDS” means:

Trump derangement syndrome (TDS) is a pejorative term, used to describe criticism of or negative reactions to President Donald Trump that are perceived to be irrational and to have little regard for Trump’s actual policy positions.[1] The term has mainly been used by Trump supporters to discredit criticism of him, as a way of reframing the discussion by suggesting that his opponents are incapable of accurately perceiving the world.[2][3] Some journalists have used the term to call for restraint when judging Trump’s statements and actions.[4][5][6]

Despite the usage of the term syndrome suggesting a medical condition, TDS is not an official medical diagnosis.[7] A 2021 research study found no evidence to support the existence of TDS among Trump detractors on the left, but instead found bias among his supporters.[8

Source: Wiki

GitOps + Renovate.

Tools that allow you to work GitOps (everything is defined in text files in Git) are:

• Kubernetes
• NixOS
• to a lesser degree, Ansible

Here’s a nice starter template for running your own Kubernetes cluster via GitOps with Renovate pre-configured: https://github.com/onedr0p/cluster-template