You’re right, my bad.

OP’s security concern is valid. Different CAs may differ in the challenges used to verify you to be the domain owner. Using something that you could crack may lead to an attacker’s public key being certified instead.

This could for example be the case with HTTPS verification (place a file with a specific content accessible through your URL) if the website has lacking input sanitization and/or creates files with the user’s input at an unfortunate location that collides with the challenge.

This attack vector might be far-fetched, but there can certainly be differences between different signing authorities.

Do you still need help with docker?

Which of us didn’t crack the school firewall multiple times as they made it more and more annoying each time!

You can actually (for now) just replace gitea with forgejo while keeping all the files in place and it just works. Really easy then using docker, cause all it takes is changing the container image.

It’s always the DNS!

Setting up synapse is particularly painful.

There are free services that let you send and receive on your own domain. I use zoho. I can send emails with SMTP, but unfortunately, you cannot read them other than by using their web interface in the free tier.

Aiming for a future in IT security, I find this branch of computer science somewhat ironic. You basically work to make your future work harder, i.e. you make things more secure, making your job of finding vulnerabilities even more difficult. Still a sucker for it, though

We need an open source smart tag. I recently researched how the landscape has changed and, as an android user, still nothing good in available. I’m not sure if I remember right, but Google’s find my device was supposed to be open source or at least open spec? Might be worth looking into how easy it would be to code a lil firmware for this network myself. As much as I’d love a tag for things I cannot lose, the current options are throwing money away for no actual useful tracking (Samsung), forfeit your privacy (Tile, perhaps others), sell your soul (Apple).

I used Joplin for up to 8 hours daily for half a year (university) before switching to Obsidian, too. As far as I know, Joplin lets you store the notes as files, too, but you need to set it up that way from the start.

Still, I found Obsidian to be much more pleasant and - ironically - easier to modify (by writing plugins) than Joplin.

“Pixels” mood tracker. I love it but I also love self-hosting all my services.

There are obsidian plugins that export into static pages.

As others said, the initial setup may consume some time, but once it’s running, it just works. I dockerize almost everything and have automatic backups set up.

neofetch proudly displaying 5 months of uptime

I do that, but only allow access to private services from local IP addresses, rather than putting auth in front of them. Then I use IPsec to access my local-only things.

Because that’s their thing. That’s the first thing that’s right in your face when you open their website. It’s like asking why AdGuard or even PiHole block DNS results.

I also switched from Joplin to Obsidian after about half a year. There’s an open-source plugin that lets you self-host a syncing server.

What I found paradoxical is how easy it is to mod and write plugins for Obsidian compared to Joplin. I would’ve thought that modifying the open-source candidate would’ve been easier, but nope.

• Firefly III - Finance Manager
• Strongwan - IPsec VPN
• Mealie - Recipe Manager
• Samba - Network Drive
• ProjectSend - Mediafire kind of upload thing
• Vaultwarden - Password Manager
• Nginx - Reversed Proxy
• Pihole - DNS Adblocker
• Portainer - Docker Interface
• Vikunja - TODO Notes
• Anki, Joplin, Obsidian Sync Server - Syncing of your notetaking solution of choice
• Homeassistant - Smart Home Frontend
• Immich - Google Photos Replacement