Thanks. No need for the setup notes (but thanks for the kind offer), it was more about the experience, but I think you’ve already answered my question with less surface area (I do have 1 Pi that’s internet facing for Radicale)
Have you looked at Ansible? That might also cover what you’re trying to do.
I went with Arch Linux on ARM for a minimal approach - did you try that?
Genuninely interested in your experience of Alpine Linux as I’d not considered it on a Pi (only VMs so far…)
If you’re just looking for something to chew up CPU cycles and don’t know what to host, consider something like BOINC where you’re “self-hosting” (extremely loose term) scientific research, like cancer, new drugs, etc.
If they’re sharing it with me, then sure, I’ll add it to the folder for that party, holiday, event
Immich would scan it and faces are taken care of and if there’s metadata in there, great, if not, dunno if I could be bothered to edit it… maybe date stamp if that was wildly off.
I commented elsewhere here, but E2E encryption is just between the server and the end user (ie a VPN)
You’re thinking about encryption at rest, on the storage.
Immich would have to setup a whole new design to be able to store all the metadata on a per-user basis… but… you could have multiple Immich instances if you were to host it for your friends, but I think we’re drifting into “why bother” now…
Well… E2E is still feasible, that’s your VPN for example.
Encryption at rest is where de-dupe, search, etc, can break.
Why wouldn’t this apply?
One day in the future the later version of sudo would become available…?
As far as mitigation is concerned, the only thing you need to do is to confirm that your system’s sudo version is at least version 1.9.17p1 or later, which can be done with the command sudo -V. If your version is older than 1.9.17p1, update immediately.
I guess this is mainly targeted at Universities and organisations that mirror repos?
They’re the kinda place (I presume) that would be able to support this…
Is that the same i as the squareroot of -1?
If you’re able to, use GeoIP ranges to only allow access from the countries you want.
That immediately limits a lot of everything
Then - again if you’re able to - use a block list that covers known scrapers in case they’re in your country.
I use pfBlockerNG on my pfSense firewall for exactly this.
Take a backup and go for it.
Personally, I ditched OMV for standard Arch Linux and just added the packages I wanted…
This
x10
I don’t think you’re forced to use it.
I’m certainly not - and surprisingly I’m still able to function and communicate with others.
MythTV for the main storage, stored in folders by my genre.
All metadata updated via Picard.
Syncthing to replicate to a Raspberry Pi (2 or 3, I don’t recall which) running Volumio with a DAC board to connect speakers to.
The Pi is in the bedroom, so I only replicate the genres that I want, which cuts down on storage needed on the Pi, and means I don’t need MythTv / NAS / etc. powered over night.
I was going to query why fork instead of just maintaining, but after reading theose comments I see the problem.
So, ok, I need to start shifting packages…
Thanks for the CoMaps pointer, didn’t know about that / issues with Organic Maps
MythTV - as others have already mentioned. It’s designed to work with the 10’ interface
Even records TV programs (presuming you have tuner hardware of course) - which I don’t think the others can do?
We don’t stream Netflix, but we do watch other various streams (ie BBC iPlayer), yoochoob, etc - all works fine, inc… video files from various sources, and music…
We use it with a Logitech K400 wireless keyboard and it works great for us.
I have played with a more traditional looking TV wand remote in the past, but you still need a keyboard to type in program websites, names, etc. so the K400 became our defacto remote.
MythTV used to come with Ubuntu as Mythbuntu back in the day, but most of the pre-installed distros have fallen away, so you’d need to pick a distro and install it yourself.
It’s a very mature application, so you won’t need to keep updating every time you want to watch anything.
Yes. And No.
I have a home made (arch btw) NAS that stores all our files - mostly via syncthing, even from remote family.
That was it.
Then I installed Immich so that we could see the photos… so… it’s technically just a NAS, but it does now have a web application running on it…
Videos & Music are on a completely separate MythTV box which existed before the NAS - I saw no point in moving ~3TB of data to a separate box that would need to be powered when I want to watch / listen to something… my NAS powers itself up & down throughout the day to save electricity (and it was interesting to learn how to make it know when it was / wasn’t being used)
Ansible is an automation tool to setup systems to a known desirable end state.
TBH, for a single device, it’s overkill, but you seem like someone who keeps good notes and has some custom files to copy across… you could convert your setup note into an Ansible file, and it will also copy over your custom config files.
For Ansible you define the desired outcome and it does “all” (kinda) the work for you… so… say you want Apache, MariaDB and PHP, it doesn’t matter if half are installed already, or not, or their dependencies - you just say:
Do an update Install packages: A B C Copy my config files over Start the services Relax
Yep, it’ll take 10 times as long to get it working up front, but the day you want to duplicate it / start on a fresh Pi / VM, it’s all there for you.
I use it to setup all my Pi Zeros thr same way (they’re doing BLE presence detection) and for their regular updates
I’ve also got some VMs setup that way
But… I tried it on a laptop and as it’s a single device I just ended up setting it up manually and now the ansible script is woefully out of date… just some balanced feedback.