Ah, right! I didn’t scroll past the Newswire-section because my brain parsed it as a “Related articles”-section with links to previous posts. I am no longer confused!

Sorry, what does this have to do with the post? I tried to find references to it but couldn’t, and now I am confused.

Since switching from Gmail three years ago to Proton, I’ve not had a single spam mail. I also use aliases most places so that I can disable it if I start receiving spam on one.

I’ve been running tge AIO container for several years now and it is running perfectly fine. I only enable whatever I use, so for instance no Collabora.

But for Collabora, while it should be good for single-person use, if you require some kind of collaborative simultaneous work, you should probably set up the high-performance backend. I did this at work for a NC-instance hosted via Hetzner and it works well when we tried it, but we don’t really use those kinds of tools much in our daily work.

It depends on what service - some, like Jellyfin, are accessed only from home IPs which are static (for music through Jellyfin I use offline mode to prevent too much mobile traffic), so I can add those specific IPs in the whitelist. Otger services I need to access from elsewhere, and I can add entire subnets (i.e. for my phone carrier network or VPN servers). Those change once in a while and that is annoying. Other services I want publically available.

Jellyfin especially still has some unsecured endpoints where it would be wise to take some.extra precautions. I think the risk some people seem to think this poses is a little overblown (i.e. rights holders finding your instance and reverse mapping your entire library and suing you to oblivion), but better not risk it.

What kinds of things are you planning to expose? What I expose I hide behind a reverse proxy with IP whitelists. Whatever I don’t need access to on the go I don’t expose.

I put encrypted backups (borg or restic) on a storage box from Hetzner. One local copy on a different drive and one remote. Keep your encryption passwords safe though, otherwise they aren’t worth much.

Oh, and I plan to report status of the cron jobs that run these backup scripts via MQTT and display backup status in Home Assistant. But haven’t started that yet. So far I dump the logs and view them occasionally.

I think their point was to make sure they are done in order, i.e. update before upgrade, not the other way around as in OPs example.

Can it be used without arr-integrations? As just a way to keep track of stuff users would love to have available, but currently isn’t?

I like FreshRSS - I also have some readers that connect to my instance, like FluentReader that provides a better full article view, but I mostly use FreshRSS directly these days.

You can export your data from Spotify, and use that as a basis for downloading songs via for example yt-dlp (this can be automated), or slowly build it up again over time in whatever system you set up by buying the albums/compilations containing the songs.

What does Jellyfin have to do with that? If you implement acess control in the reverse proxy, requests from non-whitelisted IPs are just not forwarded to Jellyfin.

I have mine behind a revwrse proxy (Nginx Proxy Manager), and use a whitelist to allow specific IPs or IP ranges access so my family can use it.

I use Nginx Proxy Manager and whitelist my remote users. They all have static IPs though, so its a workable solution for me.

Before I used a whitelist I would go through the access logs, and could never find any attempts to exploit the endpoints - only some random bots trying to find some admin page assuming it was another service. Not saying you shouldn’t take it seriously, but you are likely not subject to these attacks the moment you expose it.

That said, there is a discussion about these endpoints on their repo. At some point they will be fixed (my impression is that they are hampered by legacy Emby code). When they do, you could do this more securely.

Oh boy, I can see I really need to get my dashboard game together.

The market for local beef is an oligopoly with only a few buyers, so it’s easy for them to manipulate the price

That’s an oligopsony, not an oligopoly which would have only a few sellers.

Hosted on Jellyfin, Feishin on laptop and Finamp on mobile.

I tag all my music through MusicBrainz Picard before adding to my server. I think most of the artists are good after that (i.e. if there is a featuring artist, it becomes a separate entry), but I typically use the album artist field to browse by artist.

ETA: I have run into enough cases of Picard wrongly tagging my music that I wouldn’t want it automatic. It is not often, but enough that I would be annoyed.

And this has actually happened before?

And apart from an undesirable bandwidth usage resulting from someone guessing their way to my file structure, how can this be used to compromise my server?