Yeah use something flatseal to mess with further securing flatpaks

Flatpaks do better sandboxing. So better then .deb’s, but not better then using a web browser

I do this. Its great because of catchall emails and the ability to make one address per merchant. Then if a company leaks your email or gets hacked, you can simply change the email from hacked-company@domain.tld to hacked-company2@domain.tld and block the old address.

It also is good for ownership as you said. If Tuta gets purchased by Google (for example), then you can simply pivot to any of the many other email providers and not rely on a company being not evil.

Renovate bot is the answer. I self host it. Feel free to ask questions

Makes a PR in a repo for updated versions. I.e. you have: image: nginx:1 And it’ll make a PR for the latest version

A CI/CD tool will monitor for changes like this and redeploy.

Correct. But also public access should be considered advanced

I have setup the same thing as a temp measure, but i believe that something like Authelia or Keycloak should replace and be better than Cloudflare’s email OTP.

True. I would like to add another authentication.

I guess my question is how trustworthy is built-in authentication? I’m not really talking about vulnerabilities, but that’s a part of this, but how much trust can I put into a small projects login page being secure?

USB C to AUX adapters work for me.

Having a secure and up to date device should likely be more important

Yes. Many security updates come from upstream AOSP and then are put into GOS.

So when a device has stopped getting AOSP updates, it is unreasonable for GOS to continue support it. They can and I believe they have applied more critical security patches to just barely EOL devices, but this isn’t promised or expected.

https://endoflife.date/pixel This is for googles support. GOS may support a specific device a little longer than google but does not promise to and recomends getting a newer device.

Pixel 8a looks real good right now.

Oh yea I forgot about matrix. Maybe setting up a bridge would work. Thanks for the reminder I’ll look into this

good question. friends use discord.

Huh I’ll have to give Kodi a shot. I’ve already got a bunch of Debian experiance and have jellyfin so leaning kodi shouldn’t be too bad.

Checkout my super recent post history. I’m doing something very very similar.

Basically I’ve decided on Debian for OS, docker plus Portainer and dashy for interface, and mdadm for raid 1.

I’ve tested a raid 1 failure and rebuild on two thumb drives I have, and have everything well documented. Feel free to ask any questions.

Yea I have a fully seperate backup solution

Oh cool!

Any recomended monitoring solutions? Or just proxmox and grafana?

Do you mean mdadm? https://raid.wiki.kernel.org/index.php/A_guide_to_mdadm If not can I have a link?

I can see the data on windows, but not on linux