Nyfure

Dont bother with raspberrypis for most things anymore. Too expensive for that old shitty hardware they put on the boards…
Machines like the Intel N100 is much simpler to deal with. No more shitty hardware incompatability and old CPU which doesnt even have proper modern HW offloading (looking at you Pi4… what a shitboard)

too bad… inconveniencing other users was also part of the point. Not sure how not doing anything, but not deleting it has more impact… def. feels like alot less.
Guess you cant use reddit reliably anymore for searching for stuff, too bad. Use a different platform or hope it has the chance to grow and is less shitty.
Sorry you are so inconvenienced for continuing to use reddit, otherwise… why would you care?

No problems with yubikeys or the receptacle they are plugged into yet… no idea what you do while these sticks are plugged in… doesnt seem like a major concern per the reviews

you want a frontend, not the “service” itself.
Under “service” i usually understand the main logic part of something. In this case the LLM-processing itself.
Thats probably where the confusion is coming from here.

Please include the actual calculations for energy-prices as many, you may not know, live in different locations and pay different prices compared to you.

As far as i understood tailscale funnel its just a TCP-tunnel.
So you handle TLS on your own system, which makes sure tailscale cannot really interfere.

If you already trust them this far, might aswell do the same with a VPS and gain much more flexibility and independence (you can easily switch VPS provider, you cannot really switch tailscale funnel provider, you vendor-locked yourself in that regard)

I’d connect the VPS and your home system via VPN (you can probably also use tailscale for this) and then you can use a tcp-tunnel (e.g. haproxy), or straight up forward the whole traffic via firewall-rules (a bit more tricky, but more flexible… though not that easy with tailscale… probably best to use TCP-tunnel with PROXY-Protocol).
This way you can use all ports, all protocols, incoming and outgoing traffic with the IP-Address of the VPS.

Tailscale might even already have something that can configure this for you… but i dont really know tailscale, so idk…

And as you terminate TLS on your home-system, traffic flowing through the VPS is always encrypted.

If you want to go overboard, you can block attackers on the server before it even hits your home-system (i think crowdsec can do it, the detector runs on your home-system and detects attacks and can issue bans which blocks the attacker on the VPS)

And yes, its a bit paranoid… but its your choice.
My internet connection here isnt good enough to do major stuff like what i am doing (handling media, backups and other data) so i rent some dedicated machines (okay, i guess a bit more secure than a VPS, but in the end its not 100% in your control either)

Many systems dont support subpaths as it can cause some really weird problems.
As you use tailscale funnels, you really want incoming traffic from the internet. I am not sure thats a good idea for e.g. homeassistant that is limited in access anyways.
Might aswell use tailscale and access the system over VPN.

And for anything serious i wouldnt use something like funnel anyways. Rent a VPS and use that as your reverse-proxy, you can then also do some caching or host some services there. Much simpler to deal with and full support for such things as you then have an actual public IPv4/IPv6 address to use.
Heck, dont even have to pay for it with the Oracle Always-Free system.

What i have a problem is the developer accessebility.
I want to build my own sensors into boards and use those, but the devboards are so expensive, its not worth it.
A board with an esp8266 costs just 1-2€, with zigbee its 20-25€.
Might aswell go for the new esp32 versions now and use thread… and its still cheaper.
(though that wasnt an option a few years back, best option there was esp-mesh which kinda sucked)

Async is good because threads are expensive, might aswell do something else when you need to wait for something anyways.
But only having async and no other thread when you need some computation is obviously awful… (or when starting anothe rthread is not easily manageable)

Thats why i like go, you just tell it you want to run something in parallel and he will manage the rest… computational work, shift current work to new thread… just waiting for IO, async.

Just pay the few dollars per year and have a stable and reputable domain.
Certainly for fediverse i’d want a stable domain, these are usually hard to migrate.

The performance is absolutely abysmal and the error-rates high. For personal use, just have a normal VPN.

Index of repositories is held locally, so if you use the same repository with multiple machines, they have to rebuild their index every time they switch.
I also have family PCs i wanted to backup too, but borg doesnt support windows, so only hacky WSL would have worked.
But the worst might be the speed of borg… idk what it is, but it was incredibly slow when backing up.

Was using borg, was a bit complicated and limited, now i use kopia.
Its supposed to support multiple machines into a single repository, so you can deduplicated e.g. synced data too, but i havent tested that yet.

I mean the tools mentioned also support these features, how does duplicacy and its prorpietary software make them better?

No, then they only handle your DNS setup, which is still okay in my eyes.
Its certainly far away from scanning all HTTP traffic. Not to forget the juicy metadata they get about the users across a big chunk of the internet, perfect tracking machine in a neat package with easy access by the government.

Convenience will kill the cat

Just FYI Germany likes to make things more difficult, so with federation every sub-area is separated in many aspects and has own agencies for different things…

BfDI is only responsible for health and internet-provider institutions (and a few more).
Otherwise you can send it to the one where the company is located at, or always where you are located at. (they will forward it, but that can take a few months, so better to submit where it has to go).

EU Cookie Directive applies to all website owners within the EU aswell as Websites which target EU users.

It gives clear rules for different categories of cookies like how you need to display them and for which you actually need consent to be allowed to use them.
It also sets rules for how easy certain actions have to be and granularity.
(very simplified)

The real MVPs are websites not needing a cookie banner because they only use required cookies for which you dont need a banner.

If its only you and you want best security, setup a VPN system. (Tailscale, Netbird, or others are quite easy)
If someone else should also, and you dont want everyone to have to use a VPN, then you can expose some services directly. Of course behind CGNat you need some third-party system to allow this (e.g. cloudflare or a rented server).

I am not a big fan of cloudflare, they are a huge centralized company, easily allowing tracking across websites with clear-text access and kinda discouraging learning how to secure things yourself (which you have to do anyways, because you are a service provider and only cloudflare is not enough if its still publicly accessible though them)
But in the end its your choice. They easily allow you as service provider to protect yourself from DDoS attacks or allowing IPv4 access when you are behind CGNat, things you just cannot easily do yourself, certainly not without costs.