redcalcium

Next: how do we know tailscale's network hasn't been backdoored?

I think you can send a SIGUSR1 signal to mumble process to tell it to reload the ssl certificate without actually restarting mumble's process. You can use docker kill --signal="SIGUSR1" <container name or id>, but then you still need to give your user access to docker group. Maybe you can setup a monthly cron on root user to run that command every months?

I haven't actually tried it though so I'm not sure how it compares with rsync.net. How easy it is to access snapshots on hetzner? On rsync.net, snapshots are stored under .zfs folder so it's very easy to access.

Note that rsync.net includes free 7 days daily snapshot. Also, the main advantage over backblaze b2 for me is you can just sync a whole folder full of small files instead of compressing them into an archive first prior to uploading to a b2 bucket. This means you can access individual files later without the need to download the whole archive.

I still use b2 to store long term backup archives though.

Aye. Docker on linux doesn't involve any virtualization layer. What should the direct the installation setup be called? Custom setup?

I'm currently using nextcloud:26-apache from here because some nextcloud apps I use is not compatible with v27 and v28 yet. The apache version is actually less hassle to use because nextcloud can generate .htaccess configuration dynamically by itself, unlike php-fpm version where you have to maintain your own nginx configuration. The php-fpm version is supposedly faster and scale better though, but chance that you won't see that benefits unless your server handles a large amount of traffics.

People usually come here looking for advice on how to replace their dockerized nextcloud setup with a bare-metal setup. Now you came along presenting a solution to do the reverse! Bravo!

What do you guys think about putting the different components (webserver, php, redis, etc.) in separate containers like this, as compared to all in one?

I actually has a similar setup, but with nextcloud apache container instead of php-fpm, and in rke2 instead of docker compose.

You still have internet subscription, right? Next: run your own ISP

I suspect most of kagi's subscription money actually went to google's pocket. Google charges a lot of money to access their search api, about $5/1000 queries.

This is why you should build a package when compiling from source instead of doing make install directly. Packages can easily unistalled or upgraded.

I usually use a version manager to install those stuff so I can install multiple versions when I need it. asdf is my first choice because it support a lot of languages via its plugin system, and the list of plugins is huge.

Steam is still not updated to run natively on Apple Silicon-based Mac computers, nearly four years after Apple's transition away from Intel CPUs started. It's now a slow and clunky barrier to playing the games I own on my Mac computers—a far cry from the pro-consumer persona that Valve and Steam usually enjoy.

Kinda similar situation in linux where steam hasn't been updated to use wayland. It's flickery mess on nvidia hardware and a bit glitchy on intel and amd (like other electron/cef apps running under xwayland). Proton works great though.