Ok, so reading the replies I see that it was meant for me.

All the relevant volumes are mapped to the actual filesystem on disk (like you do in docker compose, ig it’s called a volume bind-mount?), so when I have to take backups I stop the docker container and manually cp/rsync/whatever from the directory.

The github and codeberg services are nothing but HTTPS checks for both of them

What does oPodSync do exactly?

Ah, it seems that gollum would cover this, although I’d keep an eye on this as well.

Ah, as long as self-signed certs are an option, I can work with that :)

Thanks! Still remember the good old days, when I didn’t know how to set up docker compose properly (I don’t think I still do 🤣)

But I’ve certainly come a long way, and it’s really fun! Also, I’ve seen you post here often! Cheers!

I access it using the hostname of the device (since netbird and tailscale both let you do that)

I also open docker ports only for localhost, and use caddy to reverse proxy subdomains to the respective localhost ports. Less port clutter from outside this way. Ofcourse things like SFTPGo’s SFTP port is an exception

Also, vaultwarden requires HTTPS?? Ah drat, that’s not good :/ I don’t have experience with that.

I’ve heard good things about SearXNG. I’ll be sure to check that out.

I don’t see the need for cryptpad, since SFTPGo serves my purposes.

I’d look into mealie, since I’m going to live alone and need to figure my own meals out. Perhaps Sure/Actual too!

I am still looking at container management, right now I just manually update/backup everything.

That looks interesting! Although my current setup is simple, so I’d like to hear from you what arcane simplifies from experience

I don’t have anything against Pihole. It’s wonderful! I don’t have additional resources (like RPi), and I want to keep everything on one system, and my usecase is simple enough that netbird covers it, and I don’t know if I should pass all my DNS requests on both my phone and PC through my server (because iirc it’s finally the pihole system that’ll make the request?)

Also I hate ads lol

Oh wow! I didn’t know home-assistant can work in a closed network, but now it makes sense

What does leafwiki do exactly?

I also read your backup strategy below and that seems pretty interesting. My strategy differs. Have nothing in the volumes, unless it’s like docs or whatever lol. I do think that’ll change with things like Paperless, since I’d want to persist and carry over the tagging strategy or whatever.

Took me a while to realise that the link was shared with Saotak themself. I love your articles Saotak (even if I’m not a furry) and I’ve learned a great deal of crypto from you

Thanks, this was quite detailed. You do need public relay nodes after all… which was what I was wondering.

I suppose they don’t work without having

• a coordination server of sorts
• having all the nodes on static IP

Like, if the IPs keep changing, and a device goes offline and then online, how does yggdrasil know how to reach that system?

It’s custom ascii art. I got it from archwiki. You can change the image/text used in fastfetch config

Well, wait for motorola’s graphene compatible phones to pop up ig.

Molly basically is a fork of the signal client that switches out some notification based things (such as your notifications going through fcm and such) and instead lets you use unifiedpush and/or a molly websocket. Apart from this they’re both the same. Molly uses signal’s codebase.

Thanks for the kind words! For dotfiles, I used org-babel for a long time, keeping a literate config. Now I use a git repo to hold everything with a script to pull in whatever I think is necessary. That said, one of the long term plans for supac is to add dotfile management as well, something like nix-wrapper does it. Although it will certainly take some time before we get there.

I agree and I tried hyprlock, but the issue is it doesn’t fork from the calling tty, therefore when I use it as a pre-hook for suspend it just leaves the laptop open and then I have to unlock it and then the laptop goes to sleep.

gtklock and swaylock both support detaching from tty. I used gtklock but it had failures with multiple monitors on occasion, so I switched back to swaylock.

Thank you!

Agreed, and the dev is an amazing guy! Yalter makes sure that every feature is well thought out and laid best according to the specs.