Mikelius

Gawd yes I’ve been sitting on these things for like 3 years waiting for someone smarter than me to come up with something. Thanks for the share!!

Thank you so much for sharing this, you may have just saved me a miserable future if my system were to crash.

I try to read the updates they share every month with detail, but this one must have slipped through the cracks. This feels like another thing they should have been way louder about considering the problems it could cause someone who didn’t know it flipped on without their interactive decision.

Daily on my Gentoo server, through a Cronjob every morning. It’s a custom script though, so there’s more than just doing an emerge update. It’ll send me ntfy notifications for the update results, if there are new news items, and if there are any time config merge updates to make. A few other things as well but that’s the main stuff.

Other servers, typically weekly or only manually when I ssh into them (for the ones I don’t really feel the need to update frequently).

Man, we just can’t win with these UI tools, I also thought Bruno was the solution. Only use it on my work machine so that’s why I guess I never noticed this. Thank you for sharing, time to go back to digging for better alternatives.

I use to have the same thing but moved away from the tablet solution and I got myself a pi, and then setup a script to auto start (after boot and auto login) the browser in full screen “kiosk” mode on my home assistant site. I then bought this to attach to it:

https://www.amazon.com/gp/aw/d/B0153R2A9I

I also bought a case for the screen and pi to fit in for a nice visual display (although these days the thing is embedded in my wall), but it looks like the case is now unavailable so might require looking around for one.

I’m not familiar with those two… But I’ve always been hunting for the perfect replacement.

I started with Nextcloud Deck and used it extensively until they got rid of my markdown support.

So then I tried taiga and a few others before landing on Wekan. Really great software, but the terrible API, horrible mobile support, and slow outdated UI drove me away…

Now I’m on Vikunja, which ironically doesn’t support markdown text. So I basically returned to square 1 with a better UI lol. I almost stayed on Wekan because of the checklist support, but the faster speeds, nice API, and slick UI in vikunja landed me here… for now.

I’ve been using “passwords” on nextcloud for a few years now. Minimal issues with the app, moving apps, and browser extensions. Not perfect, but hey it’s self hosted and reliable.

My personal advice, secure it down to only permitting what needs it, regardless of your trust to the network.

Treat each device as if they’ve been compromised and the attacker on the compromised device is now trying to move laterally. Example scenario: had you blocked all devices except your laptop or phone to your server, your server wouldn’t have been hacked because someone went through a hacked cloud-connected HVAC panel.

I lock down everything and grant access only to devices that should have access. Then on top of that, I enable passwords and 2FA on everything as if it were public… Nothing I self host is public. It’s all behind my network firewall and router firewall, and can only be accessed externally by a VPN.

Yeah, in my example, I have various genres of music I listen to and some days I’m in the mood for one and not another. Some of those might have subgenres I am in the mood to listen to. For example: Metal might break into subfolders called black metal, thrash metal, melodic metal, etc. Based on where I feel they belong the most. If I’m in the mood for some melodic metal today, I’ll go there. Or EDM, I’ll have a folder for Psytrance, another for House, etc…

Rather than trying to edit the metadata on thousands and thousands of files every time I change media systems as I’ve done over these years, it’s 100x simpler for me to just navigate to the folders directly and not care about how the system “wants” to organize it. Every media system wants to organize differently and I’m kind of tired of having to spend hours editing all my music just to get it to organize the way that works for me, so that’s where I’ve gotten to the point of just using folder structures.

I could never get Plex to work the way I wanted it to, so I’m actually someone who moved to Kodi and then to Emby. Once I got into Emby, I’ve yet to leave it. My biggest problem now is that I want to leave it for Jellyfin, but the lack of many things I love about Emby have never been moved to Jellyfin.

For example, I have a very specific organization of my music libraries I use to navigate what I want to listen to much quicker, since I’m into all kinds of genres of music. Emby allows me to navigate by folder structure, so if I’m in the mood for heavy metal one day, go to that folder. If classical another day, go there. Jellyfin on the other hand didn’t have folder structure view and even though it’s one of the top requested features for the past few years when I last checked, it’s never been added…

I think the day Jellyfin does fill in these gaps, assuming new ones aren’t introduced due to Emby also improving, I’ll finally jump over.

I guess to the original topic, I do think Jellyfin exceeds Plex though lol.

Plus 1 to Venstar. Got myself the T7900 and even though it offers internet access, I just blocked it at my router and connected it to the network, controlling it through home assistant. No need for third party access and whatnot with it since it’s completely local.

Raid 1 has saved my server a couple of times over from disaster. I make weekly cold backups, but I didn’t have to worry about it when my alert came in notifying me which drive went dead - just swap, rebuild, move along. So yeah I’d say it’s definitely worth it. Just don’t treat raid as a backup solution - and yes, continue to use an external cold storage backup solution as you mentioned. Fires, exploding power supplies, ransomware, etc don’t care if you’re using raid or not.

I’ve had this issue many times as well. I’ve found changing the MTU would help since it seems some filter specific ranges. Doesn’t always work but I’ve had more success than failure doing so

Lots of comments already mentioning the differences. I have tried these, including the mentioned ipfire, and decided on the end to use opnsense plus openwrt on two different devices.

I chose opnsense at the time many years ago because it supported wireguard out of the box, where as pfsense required some weird install process I didn’t want to deal with. Plus I liked the UI to opnsense more.

My moden has been literally replaced by my firewall so I have the ONT connected to it and then use it to do all the heavy lifting for… Well, firewall stuff. It connects to a VPN so my entire network routes through the VPN. Then my openwrt device is connected to that. It also handles firewall stuff, but more at an internal level (keeping network devices only permitted to communicate with devices I say are okay, blocking internet access, etc) and also hosts my nginx setup to route to various servers.

While I could do everything on one machine with opnsense, I’ve got a particular setup that allows me to have multiple devices at the firewall level, truly isolated from the rest of my internal network (for a couple of internet open port services). And it gives me peace of mind that if someone found a zero day in opnsense, I’m not totally screwed unless they also got one in openwrt.

To answer “which is better to begin with”, I personally find opnsense way more flexible and robust than the other 2 options. Has a lot more capabilities and upgrading is super easy without requiring jumping through weird hoops and such like openwrt does.