We aren’t a democracy, we’re a democratic republic.

Cool! Any interesting things in the tech stack, OP? I’ve been meaning to set something like this up for my family, local only.

If you’re into minimalism, I quite like mLauncher from f-droid.

I host my own feed aggregator/reader using Fresh RSS. Easy install with docker, pretty good feature set. I don’t like the mental overhead of going to an app to get things so I use my browser to view the feeds on mobile and desktop.

about:config dom.event.clipboardevents.enabled Set it to false

Diceware words.

550 stretches. Use amsteel.

I use pihole. Pihole does not work for sites that serve ads from the same domain, like YouTube

deleted by creator

Knife < sword < spear < bow < trebuchet

We can call it the USB 3.2 Gen2x2 Magnets, How Do They Work Edition

Fairly certain these can’t be done on iPhone but correct me if I’m wrong:

• Multi window/split screen -AFAIK you can only do this on iPad
• custom home screen/launcher: the icons on a grid both bores and overwhelms me, so I use a minimalist launcher with a few shortcuts and app drawer for the rest
• removable SD card. Sure, storage is getting better on phones, but the ability to pop a 2TB micro SD in my phone and keep offline copies of whatever I like for times I have no service is absolutely crucial to me (SD slot depends on what phone you have ofc, some manufacturers ditched it)
• home screen widgets
• notifications are superior on android
• USB 3.0 speed data transfer with no additional software, to any device that can accept a USB stick
• third party apps and app stores
• being able to install apps I develop for my own personal use without paying for a developer account, having to list it on the store, or having to reinstall it every few weeks
• ability to run Firefox with extensions
• multiple accounts for the same app without needing to log in and out
• USB OTG
• game emulators
• can safely browse tor

Depending on what model and manufacturer you go with,

• reverse wireless charging
• headphone jack
• ip68 rating
• call screening
• dual sim

There’s good deals on lenovo m900s or dell optiplex that are great for this. New enough to have low idle wattage and decent performance for VMs and containers, and old enough that they’re cheap.

Phillip DeFranco still makes videos? Huh. TIL.

Scanning isn’t a problem, it’s when someone gets in and sets up a c&c client that you’ve got issues. If you have open ports and out of date software, or bad password practices, it’s only a matter of time before someone turns automated port knocking into embedding malware in your printers and IOT devices.

Indeed. Everything is stored in plain markdown files you can move around and edit elsewhere. I’d like to use a FOSS alternative when I can, but second best is something I can easily jump ship from and not lose data.

you’re on windows, get sharex. It’s miles ahead of anything else. It’s the only thing I miss from daily driving windows.

As others have suggested I would stick to internal only until you’re comfortable. Dealing with automated port scanning from all over the globe is a nightmare if you aren’t running a tight ship, and a collasal headache to deal with if they get in. I started with pihole, jellyfin, and some other simple docker services. Check out linuxserver.io if you go the docker route, they have good prebuilt compose files for you to use and the community has good info on their forums. You don’t need a domain but it’s preferred if you want to host something public-facing. Make sure you have fail2ban configured if you open stuff up to the web, it makes dealing with the automated attacks easier.

I’ll do you one better, shoot a BFG to kill a docker container. https://github.com/gideonred/dockerdoomd

If you have more than one VPS to manage or multiple people that need access via SSH, you may want to look into using SSH certificates instead of keys. Keys get messy when you have to wrangle a lot of them and it’s a real pain in the but if you need to revoke multiple. It does require more than just generating a key pair and giving it to the server to trust though.