JustEnoughDucks

Hey man, that is what I used it for, but with the Belgian government! Great piece of software though!

Intel Arc GPU. Had to enable a few modules, reboot, debug, follow the jellyfin docs for writing to some configs, reboot, didn't work. Follow the error messages which are pretty much useless, get pointed to stuff that isn't relevant. Finally someone on a forum had a good reply where they told me I have to download the entire linux proprietary firmware directory, extract the i915 folder from it, and plop it in my firmware folder and reboot. Then everything loaded and hwacceleration worked.

Hard agree. I love jellyfin and use it exclusively, but getting hardware acceleration working is a mess, the movie and show selection UI is really written by a developer and is very basic and 2010ish.

Android apps like Findroid really improve this, but the webUI and androidTV/chromecast UI really need an overhaul.

But what is the threat model where a TPM-stored LUKS key protects against?

I fail to see it. It doesn't protect against any physical attacks at all, and it also doesn't protect against attacks while the system is powered on.

It seems to only protect against the attack of someone stealing your hard drive out of your system but leaving the entire system behind. Maybe for encrypting extra data drives that will want to be resold later? But that is more a datacenter threat model

• Ryzen 2700X on a gigabyte B450i

• Arc A380

• 2 mirrored 4TB HDDs and 1 12 TB HDD, luks encrypted and on 2 zpools (I have an "unsafe" mount path for data on a single drive like media)

• removable flash drive with boot partition and main SSD keyfile

-Zwave dongle

That's it.

I can run everything I need to on it and my home internet is only 100/30 still because I don't live in a city, so 2.5gig networking isn't worth the cost. a380 does all of the hardware transcoding I need at a fairly low power. It isn't as good as just getting a newer NUC, but it was cheaper and a fun project.

Also doing a full renovation, so KNX will be connected for home assistant to control my lights and things and my smart home stuff will probably balloon.

For sure, but the point is that it isn't integrated into homeassistant.

For many people, they want to do everything from homeassistant. You can always have kludged together solutions. I edit my configs with VIM and backup to my central backup location via an automation. However, this is doing things outside of homeassistant that many people find inconvenient.

• No backup solutions besides manual backing up and then setting up baremetal backing up

• no configuration editor

• HACS works, but no custom addons

• manual configuration of esphome/nodered/mosquitto (I prefer this though)

I prefer docker because it is comfortable for me and I run all my services on one server, but it is indeed a bit less easy.

Hmmm. What is the catch? Seems like a honeypot a little bit.

Here in belgium it is illegal to have hidden security cameras. You also have to put up a visible sign if you have them.

Location of the cameras here is easy lol

Or in my case, the entire front door is made of glass...

Here in belgium our doors sacrifice everything in the name of marginally more security: fire safety, failure modes & maintainability, convenience, and protection from user error.

• Each modern door has 2+ deadbolts + hooks, many times a strike plate that is a bit bit more crowbar resistant, etc... but the mechanism is all tied to the handle so you can't lock the door if the handle sticks because of lack of maintenance or -10C weather. This also is about 1500€ to replace if you break it trying to lock your door when it is sticking.

• Many doors have no front handle, so if you leave your keys inside (even if you are just running to get the mail), you are locked out. If someone leaves the keys on the inside of the eurocylinder, you can't unlock it from the outside unless you bump the keys out which isn't too easy for someone who only has a key.

• Finally, almost no doors nowadays have a deadbolt dials on the inside, so you have to lock it from inside with keys. This means that both someone who steals a key can lock you inside (see point 2) and also it is a huge fire hazard because you can't open the door from the inside without a key. You either have to hope that you aren't too blind and dazed from smoke during a fire to find the keys, get them in the lock, and get outside, or leave the keys in the lock and completely negate the security benefit of having no deadbolt dial + the added inconvenience of another person living there unable to get inside if they come home later.

Then, on my door and many other modern doors here the security that they sacrifice so much functionality for is negated in any case because there is a 60x180cm double glass pane that they can simply break through. It is literally the worst system I have ever come across lol

Though for the actual password selfhosting part of it, that is too much for my blood. Much higher chance that I would seriously fuck something up and lose access to hundreds of services than the remote bitwarden server gets compromised or becomes too shitty to use.

I have that setup. The entire front page of Chromecast is baked-in advertising with a small row of your apps and pihole with a good list still doesn't get rid of them, sadly.

Chromecast is built for and of ads. That being said, it definitely does "just work". Jellyfin + Chromecast is a great streaming experience. I don't have to deal with skipping and stuttering like on the android app.