nelson

I also did it with this.

While you can change it afterwards, it might be worthwhile to check a setting in immich on how it organizes the photos on disk you upload.

I changed it to year/month/photo-id because I find it convenient, but it does not organized them like that for backups.

You can change it at a later date and run a job to “fix it”, but it might be worthwhile to set it up correctly from the start ( if this matters to you ). So no harm done if you change your mind later.

Fair enough. Though I still feel that a company either provides the device and can enforce policies, or they don’t and they can’t.

You have my sympathies for your situation ( though I am aware that doesn’t help you very much :( )

What kind of company requires employees to buy their own device to do their work?

I’m on board with this. It sucks and it makes things a lot easier to be able to have SSO.

But I’m also peeved the SSO tax is nearly always in the enterprise tier and never in the first paying tier. Even if you’d want to pay for it, the enterprise cost is usually a multitude in price with features you likely don’t need.

They just know companies have policies that enforce SSO for compliancy reasons and are forced to pay.

But as a self hoster the enterprise tier is even more disgustingly expensive.

But the open source projects we use and love also deserve contributions ( financially ). But as a self hosted there’s also a financial incentive to self host and not take everything as a SaaS ( besides the obvious take control of your data ).

Edit: I mean I agree with the selfh.st statement and yours ( for clarity)

The best is pretty subjective and partially relies on what you need.

Keycloak is one of the most feature complete ones I think.

I’ve used authelia before and liked it, but it had a very bare UI and everything was done through config files which forced redeploys on changes. It wasn’t ideal for me.

I’m currently trying out voidauth. It’s got some more Ui features compared to authelia and can apparently also simulate some Active Directory queries to forward your users to third party tools for provisioning ( unless I saw that wrong, I haven’t tested any yet ).

Authentik looked nice, but I haven’t gotten around to checking that one out yet.

Always been a bigger fan of the god of balls of steel… Testicles

Signal used to do text messaging as well but they removed the feature. As they felt it was unclear when a message was fully encrypted ( signal message ) and when it wasnt ( text /RCS message ).

I don’t think there’s a privacy friendly chat app that also does RCS.

How do you mean merge?

It’s basically another messenger.

Signal is a great app to replace your messenger with. Keep in mind that it doesn’t save whatever media you post there in your gallery.

Matrix is another solution, but you’d have to self host that. I have no experience with it.

Threema is a swiss app which I think was pretty privacy respecting as well? It doesn’t use phone numbers either IIRC.

There is also this: https://github.com/alangrainger/immich-public-proxy

I think your immich gallery can even be private ( though the public proxy would need to be able access it ).

I have no experience with it though.

How do you enforce consistent backups of the database? Do you dump the data periodically? Copying the data on the docker volume won’t give you consistent ( and possibly corrupted ) backups IIRC if the database itself isn’t stopped.

Email notification and the like usually don’t work out of the box and require SMTP configuration. This is usually available in the app admin consoles or configurable through Environment variables in the console.

I’m not running it ( and I haven’t checked it for Monica HQ ), but those would be the first things I’d look for.

The .env.example file shows SMTP settings. The example file notifies to a logfile rather than an email.

https://github.com/monicahq/monica/blob/main/.env.example

# Mailing
# Set the MAIL_MAILER to 'smtp' if you want to send emails.
MAIL_MAILER=log
MAIL_HOST=smtp.mailtrap.io
MAIL_PORT=2525
MAIL_USERNAME=null
MAIL_PASSWORD=null
MAIL_ENCRYPTION=null
MAIL_FROM_ADDRESS=hello@example.com
MAIL_FROM_NAME="${APP_NAME}"
MAIL_REPLY_TO_ADDRESS=hello@example.com
MAIL_REPLY_TO_NAME="${APP_NAME}"

I have no clue as I’ve not set this up myself unfortunately. :(

There are also certain Linux distros have SElinux enabled ( like red hat or fedora ). This could also block docker from accessing the file if it is enabled.

You’d have to search online how to set a policy in selinux to allow it.

SElinux does not appear in Ubuntu/Debian based distros.

Easiest check would be to run getenforce. If it works and it returns 1 it’s enabled and possibly the culprit. You can try running your docker after running setenforce 0. This will temporarily disable it until a restart IIRC. You can enable it again by setting it to 1.

I wouldn’t recommend disablint it permanently

I think if the source path doesn’t exist, docker will mount a directory ( IIRC, but not 100% sure ).

Can you triple check if the path to your wg0.conf file on your host actually exists and that the path is definitely correct?

stat /home/docker/test/Wireguard/wg0.conf

That’s cool. I’ll look into that

Here’s an alternative: https://www.opendesk.eu/en No guarantees though. But it looks nice.

I’m not affiliated with opendesk in any of way

deleted by creator

So the Flemish part of Belgium has “tenen”, which is not toefinger. The french have “orteils”, which is also not fingers of the foot( finger is doigt ).

So the map is at least wrong for those two countries.

Great. Now I need to binge that show again. Not that I don’t want to. But still.

Interesting. Thanks for that insight :)

Personally? No I’ve never bought a cert before. Given there’s free alternatives and it’s a homelab it doesn’t make sense. Otherwise I’ve used them on AWS, where ACM also just provides them for free.

What you’re saying is that certificate providers will still charge you and provide certificates for a year, but just provide you with N certificates to span that year?

E.g. if the duration is 45 days then they will give you 365/45 certificates ?