You can install and run Stable Diffusion locally (Pinokio is a versatile installer that can run SD and many other open-source AI tools as well). With SD you can build your own upscalers that are better than Upscayl, and do things like background removal too (in addition to prompt-based generation and such).
A typical use case is to forward a single port to the proxy, then set the proxy to map different subdomains to different machines/ports on your internal network. Anything not explicitly mapped by the reverse proxy isn’t visible externally.
Also Doctorow’s novella “Unauthorized Bread”.
At least Oracle Weblogic is being useful for someone.
Rather than creating a custom terminal app, could you create a user that only had permission to run the restricted commands, with a profile script that gets run at login and offers a menu of common tasks?
Does it need to be accessible via API (e.g. SQL) or just a spreadsheet-style web interface?
You can use any port for SSH—or you can use something like Cockpit with a browser-based terminal instead of SSH.
If you didn’t map a local config file into the container, it’s using the default version inside the container at /app/public/conf.yml (and any changes will get overwritten when you rebuild the container). If you want to make changes to the configuration for the widget, you’ll want to use the -v option with a local config file so the changes you make will persist.
It’s similar to how Adobe Illustrator works—if you leave the default compatibility options checked, saving in PDF or native AI format results in an identical file with the only difference being the filename extension.
Interpreting “a previously-unrecognized weakness in X was just found” as “X just got weaker” is dangerously bad tech writing.
Another advantage of Nextcloud over Syncthing is selective syncing: Syncthing replicates the entire collection of synced files on each peer, but Nextcloud lets clients sync and unsync subfolders as needed while keeping all the files on the server. That could be useful for OP if they have a terabyte of files to sync but don’t have that much drive space to spare on every client.