People will cite a lot of issues with nextcloud’s performance and stability, and I do get that it’s a bit bloated, but anecdotally it’s worked pretty much fine for me since day 1 (minus a few self-inflicted issues mostly regarding permissions). I’m not using the AIO though, I just use the nextcloud docker image with my own collabora instance running alongside it
I started my homelab with a couple exposed services, but frankly the security upkeep and networking headaches weren’t worth the effort when 99% of this server’s usage is at home anyway.
I’ve considered going the Pangolin route to expose a handful of things for family but even that’s just way too much effort for very little added value (plus moving my reverse proxy to a VPS doesn’t sound ideal in case the internet here goes down).
Getting 2 or 3 extra folks on to wireguard as necessary is just much easier.
Yeah this is why it’s so offputting seeing so much praise for him here. I don’t believe he’s ever outright apologized and owned up to what he’s said and done in the past (I could be wrong though?). Last I checked the dude was literally a neo nazi.
I’ve been subtly trying to get my wife off of it for ages but at least with pihole clients and groups I can block it off everything on my network that she doesn’t use
Yeah I feel like v15 released a bit too early outside of preview builds. It’s a substantial improvement but doesn’t feel quite ready.
I’ve done exactly this with wg-easy so I can use my external VPN on my phone while still connecting to my home network without toggling VPNs.
My config here is for v14, you’ll want to pin the image version: https://github.com/qdm12/gluetun/discussions/1192#discussioncomment-12973135 Note there’s a small typo in the local network Down rule I added, I’m on mobile right now else I’d copy my current config instead that cleans it up a bit since this post.
In the same thread, someone posted a fantastic guide to get it working with v15. You’ll need to add an iptables rule for full LAN access if you want to enable that: https://blog.bktus.com/en/archives/2918/
V15 was giving me issues because it didn’t allow you to disable ipv6, but apparently the latest edge builds do. I haven’t tried that yet
Part of the reason I just shifted to a fully self-hosted setup.
Left Spotify because of all the bullshit they pull, tried out Tidal because of the higher quality and higher artist pay, but even if it is a substantially better platform, its ownership is questionable to say the least.
I dusted off bandcamp and learned to use slskd to build a full local high quality library powered by a Navidrome instance.
I know the mobile browser space is just weird overall, especially Firefox forks, but it definitely stood out to me. Things that work totally fine in Librewolf out-of-the-box were totally busted, and most settings are inaccessible.
I’m still keeping an eye on it though, as Fennec leaves a lot to be desired, and using a chromium-based browser like Vanadium won’t do it for me because I rely so much on the cross-platform sync functions.
I’ve tried it a few times but tend to fall back to Fennec. While Librewolf on desktop is restrictive by design, it also still allows you tweak the settings to your liking (with some scolding). Ironfox felt much more locked down to me, and if a site was completely broken, I couldn’t do anything about it in the settings.
Nah, but personally I have no need to expose anything and would rather avoid the security headaches and such that come with it
Well a VPS or an exposed service, but I feel like the latter ends up somewhat defeating the purpose anyway.
When running locally (not exposed), it worked great until I tried to make the initial connection from mobile data - can’t establish a connection to headscale if it can’t reach it in the first place. Unless I’m mistaken, the headscale service needs to be publicly accessible in some way.
I decided to experiment a bit with Headscale when the wg-easy v15 update broke my chained VPN setup. Got it all set up with Headplane for a UI, worked amazingly, until I learned I was supposed to set it all up on a VPS instead and couldn’t actually access it if I wasn’t initially on my home network, oops.
I might play around with it again down the road with a cheap VPS, didn’t take long to get it going, but realistically my setup’s access is 95% me and 5% my wife so Wireguard works fine (reverted back to wg-easy v14 until v15 allows disabling ipv6 though, since that seemed to be what was causing the issues I’ve been seeing).
That’s part of my issue. I’m a former content creator and still want to keep the videos from those years up and available. I don’t really use subscriptions or anything though so I can browse without an account.
I closed out 2 google accounts entirely this month, and just about finishing migrating various accounts to use my new tuta email. I’m still keeping my last 2 accounts up just in case (I’ve had cases where very important emails sent from tuta were getting filtered by the recipient, but gmail seemed fine). But on those two accounts, I’ve totally purged all existing emails, emptied Drive, etc. I’m also on Fi as it’s basically the only remotely affordable mobile plan around here. So I’m about as distanced as I can get at this point, but not entirely off yet.
I set this up since this reply and it’s phenomenal, what a difference compared to the old way. Thanks a ton for the rec
Oh shit I hadn’t heard of this one. Soularr feels kind of like a hack and is annoying to wrangle, so a direct integration would be huge.
This is the way. The same goes for media too. Look at the state of streaming services, DRM, and digital storefronts, it’s a shitshow
I tried Jellyfin for music in addition to tv and movies, but ended up dropping that part. I set up Navidrome with beets - the adjustment is using album artist instead of just artist everywhere.
Full stack:
I just set up Readeck today. I’ve never used pocket or anything of the sort but it’s already proving pretty useful. I tend to do a lot of 100%/platinum runs of various games and I’ve been tossing guide bookmarks in a folder for ages, this is a great way to sort those out
It’s a little bit of everything.
I haven’t really dabbled with tech much outside of work since college. This year, I started on a huge journey to change that for a couple of reasons:
I’ve done all of this in the past 5 months:
Yeah I’d consider blocking out both the bots and AI-users a win-win lmao