Vaultwarden is one of the few services I'd actually trust to be secure, so I wouldn't worry if you update timely to new versions.
Chewy7324
Yes, Bitwarden browser plugins require TLS, so I use DNS challenge to get a cert without an open port 80/443.
The domain points to a local IP, so I can't access it without the VPN.
Having everything behind a reverse proxy makes it much easier to know which services are open, and I only need to open port 80/443 on my servers firewall.
Fully agreed.
Accessing Vaultwarden through a VPN gives me peace of mind that it can't be attacked.
Another great thing about Bitwarden is that it's possible to export locally cached passwords to (encrypted) json/csv. This makes recovery possible even if all backups were gone.
Great to hear you found my comment helpful.
Just make sure you make backups regularly. Especially with used drives, I wouldn't count on them surviving the stress of a rebuild. If a second drive fails in a RAID10, all data might be gone.
Edit: I'd be thankful if you could report back how the test goes. I need a drive for a backup ;) and I'm considering buying from eBay too.
I will test them upon receiving and see how it goes from there:)
I don't know where exactly you live, but if your in the EU customs/taxes + shipping will make the deal worse, but better than expected.
E.g. for Germany, this drive would cost 382€ with UPS Saver Duties & Taxes included, instead of 273€ for the drive itself.
I've found the same drive with a local commercial eBay seller for 420€, including taxes and shipping.
A new 24TB drive would cost 485€.
Edit: IMO a better deal would be 22TB drives, which have the same price per TB but are new. But then again, their used/recertified price is also ~10% lower than new.
If you want better speeds and quality I recommend looking into TorrentLeech, FearNoPeer and similar private trackers.
Sometimes BluRay remuxes aren't available or well seeded on public trackers, while they aren't even counting against your upload/download ratio on the above trackers (On TL, FNP big torrents are freeleech).
What is the video bitrate of movies/shows in the share? Does it support transcoding or are they only doing direct stream?
I'm curious because OP wants higher quality and to save space I'm usually using similar bitrate as commercial streaming services for my media library.
Why LVM + BTRFS instead of only using btrfs? Unless you need RAID 5/6, which doesn't work well on btrfs.
Most people using these sites prefer the lossless codec flac anyway, which can be transcoded to anything.
MP3 320kbps and MP3 V0 is transparent to most (all?) people, so there's not much of a reason to go with a newer codec, except for space savings.
There's not even much of a reason to go with 320kbps, as V0 achieves the same quality with smaller files. That's why almost nobody actually downloads MP3 320.
I personally think MP3 is there for historical reasons, as I don't see a reason for using lossy codecs for archiving purposes. Just download flac and transcode it once or on demand on a media server for streaming.
Not natively, as far as I know. NTFS works well on Linux for the most part (unless you need permissions), but macOS natively only supports reading.
FAT32 is universally well supported, but the partition size limit and 4GB file size limit make it unusable for me.
Linux filesystems as well as macOS filesystems aren't supported natively anywhere else, so ExFAT it is.
ExFAT does make sense, since it's the only filesystem which supports read and write on all major OS. Sadly it's also pretty basic, and thus not the first choice on any OS - except for USB sticks.
I generally recommend formatting any new storage media before using it. Just to make sure it's properly formatted to work with my machine, and the manufacturer didn't mess up their implementation for some reason.
Because they use the official apps/web-vault, they don't need to implement most of the vault/encryption features, so at least the actual data should be fine.
Security audits are expensive, so I don't expect it to happen, unless some sponsor pays for it.
They have processes for CVEs and it seems like there wasn't any major security issues (altough I wouldn't host a public instance for unknown users).