There is also an alternate app called paranoids pal on fdroid, that’s new and maintained, it did not work reliable on my phone, maybe it works better for you.
And I’ve used private lock for years and still sometimes lock the phone accidentally, but for me the inconvenience is acceptable because of the security gained.
There is private lock on fdroid, of you shake your phone biometrics get disabled and three phone locks. It’s meant as protection from someone grabbing your phone and running away with it but works fine for other emergencies as well.
There is also an aftermarket solution, if you are not on gos, three name is duress on droid.
If you still want the comfort to open your phone via biometrics plus disable biometrics in emergencies there is private lock (fdroid). It will engage when the phone is shaken, e.g. a thief grabs it from your hand while you are typing, or you shake so nobody can force you to open it by fingerprint. The device will be locked and biometrics disabled until you unlock it again. There is also a recently updated app on fdroid with the same features, but it was not as reliable for me so I went back to using private lock.
Openwrt generally works great on x64 PCs. Thiss machine will most likely be more beefy than your home router and could become your main firewall. It can handle adblocking and vpn client for all PCs on the network as well or whatever your need, as openwrt can do many nice things no commercial router can do out of the box. Install openwrt on your home router as well and use that as access point (connected via cable). You will improve your wifi signal as well. If your machine does not come with rj45 lan ports, install usb3 to rj45 adapters to the usb3.0 ports. They will give you the full 1000 mbit speeds.
You need to change the nginx config (for the website you will be hosting your services at. /etc/nginx/sites-available/yourdomain.com
You can reroute all http requests to https in that config.
Watch a video on how nginx works and how to set it up, and then look for example nginx configs for your services. It’s a pretty standard setting nowadays so the syntax should be easy to find.
I think nginx can be setup to work locally only, but do you even need it for that? It’s primary use is to proxy http requests to the different websites running on your server, enable https via letsencryt and so on, I think.
100% Opnsense. I used to run pfsense for a couple of years but there project was bought by a for profit. Enshitification ensued. They still released their code as per open source licence, but it was not up to closer inspection as it could no longer be used to built the distro from source. They banned perfectly fine hardware from using pfsense as it could not provide hardware acceleration for open-vpn (Aes-ni). The fork opnsense is to be preferred.
If you are looking for a future proof, snooping free and secure solution for home routers, there is most likely no way around installing open source firmware like openwrt. I would just pick a device with good openwrt support, some ubiquity models have that, if I remember correctly. But there are many alternatives by different manufacturers. I would just chose one with good hardware specs in your price range, install openwrt and call it a day.
You can compare pros and cons of both messengers here: https://www.messenger-matrix.de/messenger-matrix-en.html
Post quantum encryption will probably be an issue in a couple of years and I think there will be solutions then in many messengers.
I am not sure what you mean by persistent user ids. How much would it matter if you run your own server line I so with xmpp?
I am all for using the true and tested xmpp protocol.
Dawn sounds very interesting. It seems to need 802.11k and 802.11v on all AP-nodes, I am not sure they are supported by my hardware though. I’ve never heard of those standards, so it seems unlikely.
I also just read about a user complaining about crashes related to dawn. Does it run stable and does it also switch to the 5ghz band or does it seem to prefer 2,4ghz, as another user noted three years ago.
If you don’t like flatpak there is also firejail which you can run to isolate browsers or many other programmes.
There is also a programme to run your browser from ram and commit changes to disk when it closes, which I’ve used for a year or so and can recommend. I have to look up the name later at home, if you are interested.
Browsers write to disk every couple odd seconds per default settings (I think up to 20gb a day), which eats away on an ssds life cycle. in Firefox this can be changed, but the in ram option makes it smappier as well as a benefit.
Do linkwarden instances federate, so that it can act as a decentralised way-back-machine?
I would switch to jmp immediately if only it were available in Germany.
I’ve learned a lot about privacy/security from xmpp chatrooms, especially the room for the conversations client and the divestos chatroom. They both are kind of support chatrooms for the chat client/ android rom but privacy is often a topic and the programmers/ rom maintainers are also present and very knowledgeable. https://search.jabber.network/rooms/1
Here is a good overview. You could compare this with your findings:
I’ve been with 1984.is for a couple of years now. I think my domains cost around 12 Euros a year each. Their web GUI works fine and I’ve never needed to contact their customer service, so I cannot comment on that.