I’d also add:

• Filebrowser https://github.com/filebrowser/filebrowser

Sometimes you just want to send someone a random file without needing to create an account for them and walking them through installing an app. You can use Filebrowser to generate a link that they can access to browse that specific file/directory without credentials. You can set these links to timeout after minutes/hours/days/never.

• Dashy https://demo.dashy.to/

Useful to have a link to all of your services in a portable and shareable form. Very customizable and useful for most homelab assets.

There’s software that adds achievements to emulated ROMs: https://retroachievements.org/

Yeah, it’s almost certainly a VM.

If you’re using Mullvad as your VPN Tailscale supports it right out of the box. You could use Tailscale only and use Mullvad’s VPN as an exit node. This is probably the easiest and most out-of-the-box ready solution.

May as well get some more mileage out of docker and install pi-hole too.

What if you’re away from home and want to play, certainly a situation resolved by a mesh VPN like tailscale (or self-host headscale).

etc.etc.etc

Yeah, setup a pi-hole container/server to do DHCP and disable it on your router. The documentation should cover it, but you have to use network_mode: host in order for it to do DHCP.

You can then add an A record entry for your Immich server’s domain name pointing to the LAN IP and so any device on your LAN will resolve its domain to the LAN IP.

You also get pi-hole DNS filtering/adblock and, probably, a larger DNS cache than what the router provides.

On your LAN DNS server (say, pi-hole), you could add an A record for your Immich’s domain name that points to the internal IP address so clients on your LAN would simply resolve the LAN IP instead of trying to do fancy NATing. Make sure your browser doesn’t try to do DNS over HTTPS, which would skip your local dns.

Or you could run everything on a meshVPN like Tailnet. That way the (VPN) IP of the Immich server doesn’t change and the Tailnet will route the traffic over your LAN when your clients are local.

Depends on the program, they don’t use system libraries so if they have a lot of dependencies then they’ll be larger.

An example:

Steam Flatpak: 35MB

Steam pacman: 19MB

On one hand, it’s only a few MB. On the other hand, it’s 54% larger.

Flatpaks can also depend on other flatpaks. For example, graphics card support requires about 1-1.5GB of flatpak dependencies even though your system already has graphics card drivers.

Tailscale and Rustdesk are my go to for family PCs.

Finally, the tyranny of the terminal is at an end.

You’re moving the goalposts, you said:

What matters infinitely more is who has access to your data. And Google is one of the worst offenders.

That’s completely different than who benefits financially from your phone purchase.

Buying a phone from Google (HTC really) does not give Google access to your data.

There are no Google services installed by Graphene, you have the option of running Google services if you choose, but even if you choose to do so they are kept in a sandbox and not given privileged information on the system.

“Why did you lock your doors, what did you steal?”

It’s a video of him speaking in his own words, not much salt needed.

What you really want to do is to use a custom mechanical keyboard with QMK firmware so you can spend $500 to remove the capslock key from your key layout.

It will also save you room in your .bashrc file (SSDs are not cheap, ya know).

I stopped the tailscale service…

… while ssh’d through the tailscale interface.

Luckily, it was my home server and I had to drive there anyway.