Authentik handles SSO for all my apps like immich, linkwarden, owncloud etc. Openid when available but some web apps are done via forward proxy auth. Jellyfin uses LDAP via authentik which isn’t sso technically.

Other than me, no one else mounts samba shares directly. All personal files are synced to server and other devices with owncloud (OCIS).

Yes its config file only, but if you get the File editor app, it’s quite easy to just copy and paste a few lines into the editor.

Once it’s setup it never changes.

I’ve not looked for an LDAP solution but stuff like this is why i went with authentik over other solutions. Because authentik has LDAP built in, i can use this when needed (jellyfin) but then use openid for other apps (which us superior in almost every way for home lab use)

There are auth libraries that you can just plug into your app so you don’t even have to worry about that part yourself and just focus on the app

https://authjs.dev/getting-started

I use this tutorial to setup external only and internal only URLs both with SSL

https://youtu.be/liV3c9m_OX8

https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos

Check here

https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos

Check compatibility here.

If I read Dungeon Crawler Carl should I get into He Who Fights Monsters? I have a big enough back log on my list as it is, but I really enjoyed DCC. Is HWFM just more of the same?

Borgbase has good options for Borg and restic backups.

I highly recommend using one of these 2 for proper backups. Borg with borgmatic scripts are fantastic

Borgmatic

You can self host the Borg server in docker (or bare metal) on another server if you have one (or a friends) and then borgbase offers very good paid backup storage

I use a second server locally, a friend and borgbase as backup locations.

You have angered the helmsman Charon. Your misdeeds have been noted.

I used this guide to use traefik with a wildcard certificate from let’s encrypt that is internal only. So I have

Immich.domain.com

And also

Vault.local.domain.com

This allows something like vaultwarden to only be accessible on my internal LAN while something like immich is exposed so I can share albums with anyone I want.

If I want to connect to vaultwarden while away from home, I connect to wireguard first then access via the local URL.

In docker I don’t even close the app’s ports, so even locally everything has SSL everywhere.

https://youtu.be/liV3c9m_OX8

Kobo Clara BW with calibre-web has been great!

Full control of your books with self hosted calibre-web. Open device that allows easy epub transfer via USB if you don’t go with calibre. Then its also quite repairable and water resistant which is great.

If i remember correctly on my gitea (now forgejo) the default is open registration which really shouldn’t be the case for projects that are targeted towards self hosters.

My inital install was a long time ago so I don’t remember for sure

I ran nextcloud for years on good hardware and its always been the weakest self hosted app I have. I moved to seafile for a bit and then ultimately owncloud OCIS.

OCIS is a modern app that is massively better since its written with modern languages / frameworks

I don’t think this is the same thing.

Opencloud.eu seems to have been started so they could offer hosting services to EU clients and essentially compete with MS teams and others. You can’t download and run their version directly. This isn’t a fork the way that opencloud > nextcloud was a change in governance.

OCIS seems to have a great open source product that I’m also hoping to switch over to. I’ve been trying to get it connected to my authentik SSO (which I have) and just need to figure out how to get admin users on authentik to show up as admin users on ocis.

That’s the last thing I need to migrate over fully.

I used to be on owncloud then switched to nextcloud at the fork. In all that time through 3 different servers nextcloud has always been the most brittle app I’ve hosted

This one seems to be the most far along

https://furilabs.com/

Its literally not possible to have a top tier phone unless the company can pre order like 10m chips directly from TSMC. No small company will ever be able to do this.

If you want a top tier phone from a non mega corp you will never get a phone. You have to chose some sacrifice for freedom or stick to the mega corps that will always seem to control you

Please put this info on github issues for their to see

Unless its password protected apps like masterpdf and nitropdf for windows can edit anything in the pdf