Open media vault everything you need.

I have a systemd timer that fires a script that in turn SCPs things off to my nas. That’s enough for me and it’s proved it’s worth in the past when another system went belly up.

When I first used rEFInd I didn’t configure it and it still detected windows and arch. I only configured it to change the theme and to make adjustments to the kernel command line. It is a very simple bootloader that is advanced and has waaaaaay less CVE’s if not any.

I’m in the process of moving over to UKI and so will remove the bootloader entirely and at that point will just use UEFI boot loader (F12) to change OS/kernel.

I’m a lazy admin who’s been rolling this install since 2015 lol Maintaining a repo is just extra steps I don’t need, I’m happy to wgetpaste what I want to share when I want to and be done.

Yes ~/.local/share/Steam

Thanks but I just used it to be different. I’ll keep on too.

using proxmox without the web gui is possible but it is expected to be accessed via webgui or term/ssh and the VMs on there accessed via ssh,rdp,vnc,novnc,etc.

Due to it fundamentally being an advanced qemu/kvm/virtio frontend you can use virtmanager to access the VM from a desktop. In this instance try something like i3, awesomewm, bspwm or even xfce (it can be very light weight).

What env vars are you using for the docker and what’s in the config.php?

What’s a nice guide?

Follow this to get it installed and follow the configuration steps to set it up as you need it (I wouldn’t bother forwarding to another server but setup root hints instead and add a timer to keep them upto date):

https://wiki.archlinux.org/title/Unbound#

Then add these configurations to get doh or dot working:

https://wiki.archlinux.org/title/DNS_over_HTTPS_servers#Unbound

If you want a spoon-fed guide, then a search engine may help, but really, it’s quite easy.

If you don’t have a cert you can use let’s encrypt via certbot:

https://wiki.archlinux.org/title/Certbot

I think you might get part of the way but may still find you get detected. Foss DPI projects will not be able to implement the methods used by say fortinet,sonicwall, f5, juniper, Cisco, a10, and others. This is because they all use proprietary DPI created in house. They’re not going to use Foss DPI for obvious reasons, you’ll be able to create workarounds for detection and implement that in a bad payload.

Text can be in a file. All you do is add to the file and sync. Then add different files and sync.

Syncthing

goes without saying.

Bitwarden+vaultwarden, harden the chosen VPS, set SSH to use keys only, then setup fail2ban for webserver and ssh Also consider putting ffsync on it as well for extra browser benefits.

Not all domain providers will allow you to change the nameservers of a domain they sold to you as they want to sell you the rest of what you need for extra $$$

You can only have 2 name servers on a domain and it is not advisable to make them point to different DNS providers as they will both need to be authoritative and by having 2 different providers will mean you get 2 different SOA which will break fundamental DNS.

to change the nameservers will either be simple or hard, depending on the domain name provider it might take 24 hours for them to change the name servers or they may allow you to change them via web UI which could be just a 2 hour wait.

I purchase from the cheapest and use he.net for my nameservers.

I’ve not used conky since 2018.

My authy came from aur, no snap required.

This isnt rice, it’s that fine chopped pasta that can be used as rice!

😉

This is etched on to my soul and retina.

If any Arch pc/laptop I use has not been touched in over 6 month this is the first command and I’m thinking of a way to make an alias called upgrade point to a function that checks the time of the last pacman.log entry against current time and if there is a 6 month or larger difference to automatically do this for me so I don’t forget lol.