I use authentik and like it. The learning curve isn’t that steep so not a lot of wasted investment if you decide to ditch it for something else. No password flow with webauthn is pretty cool.

I tried Kagi because I was excited by the hype and would gladly pay a fee for superior search thats not google. But, my experience wasn’t great:

1. Couldn’t reliably give me local results. E.g., searching for “pizza near me” would render results from a combination of my local city, Sydney and those in Singapore.
2. UI needs some basic improvements. Rules of font spacing for starters.
3. It was slow. like at least 500 ms for me to get a page of results, even though I was pretty sure it was using my closest AWS region.

I hope this doesn’t come off as too negative–I don’t want to be disparaging. Contrarily, I would love to hear your thoughts as a supporter of the platform. It could be that I was using it wrong, or theres some mitigating features that I missed. As I said, I would gladly pay to not be the product.

IMO, you want ram more than you want processing power. 16 gig ought to be enough. Most of the time your containers will sit dormant and just consume memory. However since you want to run Jellyfin, get a recent CPU which can do hardware decoding of popular codecs. There’s charts online that show what generation can handle what codecs. Ideally you don’t want that done by software. You should still be able to find something cheap.

In terms of placement. It depends a lot on noise IMO. If you’re running something small without magnetic storage, you’re probably fine to stick it anywhere. If you have several data-centre grade hard drives, you will probably want to keep it somewhere where you wont hear it all day.

In terms of upgrading, I’m not sure if its as much of a concern as you might think. I run probably about 30 docker containers off a NUC clone and a seperate NAS, and that has worked pretty well for the last few years. I can always add more drives to the NAS, but otherwise its fine. Also, many of my services scale to zero with sablier+traefik, and I schedule filesharing for low bandwidth times. This makes things pretty manageable.