No, and if there was an option for a 20-year certificate I would have taken it.

Don’t know man, Matrix has been pretty much set and forget for me since 2017 or 2018.

They didn’t know the sixth planet was unstable!!

Ah, interesting. Looks like using grants does resemble what I envision and probably easier to set up that mTLS. I’ll certainly explore that!

Ah, thanks for the idea. I’ll look into Traefik, I’ve heard of it, but wasn’t sure what it could do.

I’m already running Headscale, and it works great. But to expose individual services to individual devices it feels like an overkill. I don’t actually need all these devices to connect to the tailnet all the time, and some of these devices I don’t even want to be able to access the entire tailnet.

My thinking is to put Immich, Matrix, and CalDAV/CardDAV behind mTLS. So the clients practically do connect via native mobile apps rather than a browser. The devices belong to a small number of users, I don’t manage them, but can distribute the keystores, and plan on doing the PKI manually as it’s really not a lot to keep track of.

Not an authentication replacement for sure, just an extra layer of protection. The goal is mostly so that if there’s a new critical exploit, I don’t have to drop everything I’m doing and immediately mitigate.

Both are arbitrary but only one is an international standard

If you wanna be my lover, you gotta get rid of my friends

So hard to pick a favourite. I’m especially proud of having the mail server.

I was talking about the packaging, not the brand. However setting my VPN exit node to a US location and looking up pictures of the product, most results do indeed have the same English-French labelling, funny.

Funny how my brain recognizes Canadian packaging before I consciously register the bilingual labelling.

I saw his ugly face and automatically read “draws a flask”

Ha! Also, small world, OOP is a friend of a friend.

I do for work but not for my self hosting operation, I don’t think it makes sense at least in my case. My recommendation is not to use full disk encryption on a home server, but to encypt specific directories as needed (I use fscrypt on an ext4 file system).

The accusation that Jarczak bypassed their authorization controls in violation of section 1201 of the Digital Millennium Copyright Act.

Why the fuck is the DMCA even a factor when the parties are in Poland and China?

I’ll check out sli.dev, I’ve been using Reveal.js for years now and highly recommend, I love how hugely customizable that is, but one issue for perfectionists is that it’s relatively hard to perfectly convert to a PDF, these days I use DeckTape that does a decent job. I used to be one of those nerds that used LaTeX (Beamer) but fell out of love with it.

Some time ago I tried Abrechnung and it was quite good actually.

When you run out of local storage…

If you have a single node, external USB storage is 100% fine. Even if you have more machines, if you don’t actually need a massive amount of storage, you can share that external drive as NFS.

Rarely happens, I freeze bread and consume cheese fast enough. But bread would be more annoying, I can make breadcrumbs but I don’t use that too often (so that will have to go to the freezer too)