Oh man the emotional damage has hardened me to take on anything in life.

I just use google OAuth since everyone I know has a google account. It just can’t use OAuth on private IP addresses, just FQDNs.

I want to be able to upload/download/share my photos from anywhere in the world without using a VPN. Additionally, this satisfies the wife requirement. It works in the background without her needing her to turn on the VPN. I don’t want her to keep asking me how do I turn on the VPN? If it’s just me, then no issue, I’ll use a VPN.

It’s hard to explain from scratch.

Caddy is a reverse proxy software that essentially redirects traffic from a certain port to another port. For example external:port => internal:port. It also enables SSL encryption meaning everything will be encrypted en route between the external and the user.

VPS is a virtual private server. Just someone else’s computer you can expose to the Internet.

Tailscale is a mesh VPN that uses wire guard as its transport. I use this to tunnel between my VPS and my Immich server to hide my home IP and to allow encrypted traffic between my Immich server and my VPS.

A zero-day (also known as a 0-day) is a vulnerability in software or hardware that is typically unknown to the vendor and for which no patch or other fix is available. The vendor thus has zero days to prepare a patch, as the vulnerability has already been described or exploited.

There’s no fix other than security through layers.

Pretty much I have caddy on a VPS that’s pointing to my internal IP using a tailscale tunnel. You are still exposing the web gui to the Internet so I just changed authentication to OAuth to mitigate since risk. There is still a possibility of attacks via zero days, but my immich is on a VM and I’m creating firewall rules to just allow certain ports out.

You will need a VPS as your other endpoint

Duck or Mozilla email relay?

You know, I’ve always attributed it to wifi shenanigans. Never crossed my mind that it was a hardware fault.

Thankfully in my household I have a rule, if it’s not handheld, it’s s wired. So thankful we don’t have much issues with it

Unifi U6 Mesh. Love the form factor

I think you can do winget install Mozilla.Firefox?

I’m thinking of bumping mine up to 128k since I do mostly photography and videography, but I’ve heard that 1M can increase write speeds but decrease read speeds?

I’ll have a RAIDZ1 and a RAIDZ2 pool for hot storage and warm storage.

I’ll just connect it to my LAN only wifi network. No way in no way out.

Yeah, I was a little shocked too.

Especially in apartment complexes. There’s usually a communal outbox for anyone to send out mail. But no, you’ll have to go all the way to a post office to drop off mail. The nearest one is a 20 minute walk for me.

Rip off the label and put it with your burn pile.

Or you could use a wallpaper scoring tool to shred it on the box.

IEEE standard is 100m

I’ve h6ave very long runs before and they worked.

But you need solid copper wire for that to work. No stranded or CCA

I wanted a sound bar, and got some affordable ones.

Then I went into budget audiophile.

Got a cheap Sony receiver and 2 bookshelf speakers. Got the whole gig for $175 total. Beats any kind of sound bar.

Did a Sonos test in store and really could hear much difference despite being much cheaper and completely offline.

Now my wife is telling me to go Sonos because it looks better with her aesthetics.

Told her I’m not getting anything that requires an account software to run. Guess we’re going to stick with bookshelves for a while