Sure, I’ll be happy to help

Is forward auth from reverse proxy supported in this fork? It isn’t mentioned in the README, so I assume it is not

The documentation says what settings you need to enable for it to work. It also says that it takes the remote user in the X-Remote-User header. I use Authelia and it puts the remote user in the Remote-User instead, so i added a middleware to traefik that renames the header to the one expected by radicale. The only problem remaining is that radicale presents the auth page anyway, and you have to login with the same username as the auth header but with any password

I used both radicale and baikal. Both work great. Both support CalDAV and CardDAV, to sync with them you need thr davx5 app on android. I ended up going with radicale because it supports proxy authentication and I can use it with Authelia

Second this. Works really well in a stable distro like Proxmox. Unfortunately however the community is only on discord. With some other patches linked there you can also use the gpu both on the host and split in vGPUs for virtual machines at the same time. I used it for some time on Arch Linux host + Win10 VM for CAD. Worked fine, but frequent arch updates borked everything often. On proxmox I never had such problems.

I currently run a ThinkPad Yoga L13 Yoga G4. Works wonders with EndeavourOS+KDE Plasma. I study engineering and I both take notes with Xournal++ and the integrated pen (other wacom compatible pens work too) and run heavy workloads like code compiling and a crap ton of MATLAB. There are some quirks specific to Linux, for example acpi does not recognize when the device is folded into tablet mode (but on Windows it works). I worked around it with two widgets with which I manually turn the tablet mode on and off. Other stuff also, I wrote a blog post on it if anyone is interested.

For all my bachelor I used a ThinkPad Yoga 370, but the dual core processor couldn’t really hold up to my computation workloads. Everything worked out of the box, always Arch Linux and I tried both Gnome and Plasma in my time with it.

You know what, I like it more than LinkGuardian. Great suggestion!

For however needs it, LinkGuardian on Android (izzyondroid for fdroid) offers the same thing!

You can setup the policies to allow search engines through, the default policy linked in the docs does that

I used to run Linux Mint on mine. Worked fine, some quirks with the ctrl key not working. Did you have the same problem on EOS?

That’s too bad. Luckily i keep just a couple of docker compose stacks there. But I should start backing them up, that vps is the only thing I don’t backup

Second Anubis, just finished by setup yesterday i have it of a oracle cloud frre tier vps, which depending on the domain routes the traffic to services hosted on the vps itself or to my server ar home. Relatively easy to setup, blocks most requests with very few false positives (one of which for example it would aggressively challenge by thunderbird trying to reach my baikal instance). I set a bit more aggresive rules than default (i also block googlebot and bingbot, since i received a bit more requests than I’d like). In like 10 hours it straight up denied about 5000 requests from the ai-catchall ruleset (mostly amazonbot) and challenged about 10000, mostly from a block of IPs in singapore, some of the hosts having the user agent of a Macintosh with PowerPC. They all sure love to explore the public repos on my git server.

I’m in the process of changing servers for an upgrade, the old one still hosting more services while I setup the new one. The old one now does run audibly quiter. I don’t even want to think how much electricity went wasted because of those bots

Also if you’re considering new hardware already I really recommend looking into surplus enterprise gear. I run my whole lab on an R730XD. It holds a ton of drives, has an IDRAC (I can’t live without it now), ECC for extra peace of mind during ZFS scrubs, and they hold an insane amount of inexpensive RAM. They’re fairly cheap on eBay or from refurbishment companies. Bring your own drives with warranties though, used drives are a headache. Servers like this can be really noisy though, I keep mine in the basement.

I’ve briefly considered it but it is out of the question for me. Not enough space in the house and enterprise gear is way too noisy. This setup will probably sit next to the TV in the living room so it has to be as silent as possible.

This is really interesting, might be the way to go for me

I had thought of that, I didn’t really like the idea of using a third party service to access my machines.

Also I didn’t mention in the post, but, while my ISP gives me a public IP, I only use port forwarding to wireguard into my home networks. My services are exposed via a vps hosted on oracle cloud free tier free, which forwards public traffic to my server via another wireguard connection

How is that different from a VM and using docker inside it? Any specific advantages/disadvantages to both approaches?

No, I wanted something that I could upgrade if I wanted in the future, especially for disks. I still have 4x 3.5’ slots available in the case and as for sata ports on the mobo I can always by a controller to plug in the pcie slots

Funny 3 out of 12 are minecraft

What trackers are you using for kids shows? I’m having the same problem with older cartoons I want to archive but cannot be found in my native language

I think xournal++ has a journal background to handwrite music