Hiker, software engineer (primarily C++, Java, and Python), Minecraft modder, hunter (of the Hunt Showdown variety), biker, adoptive Akronite, and general doer of assorted things.
Plex is moving in the app direction… So Plex is probably moving away from what you want despite being one of the easiest options.
It would probably be helpful to know what you’re trying to accomplish beyond “what”. Like, why do you want to host your music and play it via a web browser.
So, the web uses a system called chain of trust. There are public keys stored in your system or browser that are used to validate the public keys given to you by various web sites.
Both letsencrypt and traditional SSL providers work because they have keys on your system in the appropriate place so as to deem them trustworthy.
All that to say, you’re always trusting a certificate authority on some level unless you’re doing self signed certificates… And then nobody trusts you.
The main advantage to a paid cert authority is a bit more flexibility and a fancier certificate for your website that also perhaps includes the business name.
Realistically… There’s not much of a benefit for the average website or even small business.
So the local machine doesn’t really need the firewall; it definitely doesn’t hurt, but your router should be covering this via port forwarding (ipv4) or just straight up firewall rules (ipv6).
You can basically go two routes to reasonable harden the system IMO. You can either just set up a user without administrative privileges and use something like a systemd system level service to start the server as that user and provide control over it from other users … OR … if you’re really paranoid, use a virtual machine and forward the port from the host machine into the VM.
A lot of what you’re doing is … fine stuff to do, but it’s not really going to help much (e.g. building system packages with hardening flags is good, but it only helps if those packages are actually part of the attack surface or rather what’s exposed to the remote users in someway).
Your biggest risk is going to be plugins that aren’t vetted doing bad things (and really only the VM or using the dedicated user account provides an insulation layer there – the VM really only adds protection against privilege escalation which is pretty hard to pull off on a patched system).
My advice for most people:
For Minecraft in particular, to properly back things up on a busy server you need to disable auto save, manually force save, do the backup and then enable auto save again after your backup. Kopia can issue commands to talk to the server to do that, but you need a plugin that can react to those commands running on the server (or possibly to use the server console via stdin). Realistically though, that’s overkill and you’ll be just fine backing up the files exactly as they are periodically.
Kopia in particular will do well here because of its deduplication of baked up data + chunking algorithm that breaks up files. That has saved me a crazy amount of storage vs other solutions I’ve tried. Kopia level compression isn’t needed because the Minecraft region files themselves are already highly compressed.
rclone or rsync is probably better but see my reply a few comments down (the very long one) about protocol aware cloning vs just cloning things at the file system
They do have versioning: https://docs.syncthing.net/v1.27.7/users/versioning
Of course, you actually have to use that, it has to work, and you have to have a strategy for reverting the state (I don’t know if they have an easy way to do that – I’ve never used the versioned side of things).
I have had some situations where Syncthing seems to get confused and doesn’t do its job right. I ran into this particularly with trying to sync runelite configurations and music. There were a few times I had to “force push” … and I vaguely recall one time where I was fighting gigs of “out of sync” in both directions on something and just destroyed the sync and rebuilt it to stop … whatever it was doing.
Don’t get me wrong, it’s a great tool for syncing things between computers; but I would not rely on it for backup (and prefer having a backup solution on top of the synced directories). There are real backup tools out there that are far better suited to this sort of thing. I suggested Kopia, you should get some integrity checking using its builtin sync (as it won’t be able to figure out what to sync if your origin is corrupted); you won’t get that with a straight up rsync or a syncthing, they’re not application-aware enough to know they’re about to screw you over.
Restic has a similar feature but I’ve always found Restic’s approach much more frustrating and not-at-all friendly for anyone less than a veteran in systems administration. Kopia keeps configuration in the repository itself, has a GUI for desktop use that runs jobs for you automatic, automatically uses the secrets manager appropriate for your operating system, etc … Restic you kind of have to DIY a lot of basic things and the “quick start tutorial” just kinda ignores these various concerns.
Even if you plan to just use cron jobs, Kopia will do sane things with maintenance. Restic last I checked you still need to manually run maintenance tasks and if any job maintenance or otherwise fails, you need to make sure to unlock the repository (which if you haven’t set up notifications … well now you’ve got a silent backup failure and your backups aren’t running).
I just kept running into a sea of “oh this could be bad” footguns with Restic that made me uncomfortable trusting it as my primary backup. I’m sure Restic can be a great tool if used in expert hands with everything appropriately setup; but nobody tells you how to do that … and I get the feeling a lot of people are unaware of what they’re getting into.
The folks making Kopia … they seem like they really know what they’re doing and I’ve been very happy with it. We’re moving from rsnapshot to Kopia at work now as well (rsnapshot is also fairly good you’ve got a bunch of friends with NASes that support hard links and SSH, but it’s CHATTY and has no deduplication, encryption, data integrity verification is basically left to the file system – so you better be running ZFS – etc).
Duplicati’s developer is back too, so that might be something to keep an eye on … but as it stands, the project has been bit rotting for a while and AFAIK still has some pretty significant performance issues when restoring data.
You could use kopia for this (but you would need to schedule cron jobs or something similar to do it).
The way this works with kopia… You configure your backups to a particular location, then in-between runs there’s a sync command you can use to copy the backup repository to other locations.
Kopia also has the ability to check a repository for bad blobs via its verify function (so you can make sure the backups stored are actually at least X% viable).
Using zerotier or tailscale (for this probably tailscale because of the multithreading) would let you all create a virtual network between the devices that lets them directly talk to each other. That would allow you to use kopia’s sync functionality with devices in their homes.
Syncthing is not a backup tool and may very well destroy all your data on its own (though this is rare).
It’s not a new problem; I remember back in 2016 looking up one MAGA supporter on Twitter that seemed EXTREMELY enthusiastic via reverse image search.
I ended up finding a girl in Brazil that had presumably never set foot in “Nebraska” where this MAGA supporter was allegedly “born and raised.”
By integrating everything into it, it has become a good enough medium of communication for almost everything.
Except that’s not at all what we’ve done.
The only reason English dominates is because it’s the dominant language of the world super powers following world war II. It’s not because of some special design, principle, or properties.
English isn’t just “make up whatever rules and put them wherever”, particularly formal English which is what we’re talking about in the context of education.
Really, a better argument against changing the spelling is the classic “standards” xkcd, where now you’re just making another dialect of English where they spell words differently again, and now it needs to be adopted, fracturing the language further.
Language will evolve with or without direction. We have the structure in the form of schools to actually evolve it with direction in the name of making things more consistent and intuitive. We should use it, that’s all.
The old “why try to do anything because it will never be perfect” argument never holds water.
I disagree that it’s a fools errand. Misspellings rarely become popular enough to become “proper” because we teach everyone the “proper” spelling and we have spell checkers on our computers that are used for virtually everything.
There’s no method for the people speaking the English language to put pressure on a word that already exists because we’ve build up this infrastructure to "lock things in’ and insist that “they’ve been this way so they must continue to be this way.” The only way we get language evolution currently is via slang … which is hardly a way to get a better language.
I know the history of facade, it’s like many other words we’ve stolen from other languages that don’t make a lick of sense in our alphabet. It’s not an infinite list, it’s fixable, but we need to change the mind share that “it has to be this way.”
We made up official spellings, we can fix them, they’re not an immutable law of nature.
That’s something only a teacher would say. As someone who did all their school work and got a fancy engineering job, a lot of it was bogus busy work that 99% of us have completely forgotten.
You can’t tell me that I needed two teachers having me comb through the book for words that weren’t part of the index so that I could rewrite the word’s textbook definition on a piece of paper verbatim on a weekly basis and that that was a good education experience.
You can’t tell me my high school study hall where they’d give you something to do if you were bored and forbid you from sleeping or playing games unless the study hall monitor “liked you” was a good experience.
I mean my high school algebra teacher couldn’t even remember the algebra lesson she’d taught every year for over a decade when I had her. If it was really a life skill or that important, she would’ve remembered.
In calculus they teach you the hard way to differentiate and then they’re just like “ah but actually you can do it this way and that’s how everyone does it.”
Artificially raising the difficulty by forbidding formula sheets in math is also just stupid. If you can see the problem, recognize which formula to use, and use it, that should be enough.
We’re just straight up wasting millions of hours of people’s time with our education system that has very little merit in terms of long term results and retention and negatively affects both people that come out of it “passing with flying colors” and people that flunk out because of various home life circumstances, bad teachers, difficult with the material, or a lack of interest.
Students are miserable (suicide is at an all time high last I checked and I’m pretty confident it’s not just about social media), administrators are miserable, teachers are miserable, and kids really don’t learn all that much that stays with them into adulthood. We desperately try to shove way too much information into people’s heads in a very dry and uncaptivating way. We need to throw the system out and figure out how to teach what matters and change/replace stuff that doesn’t matter or make sense (e.g. we changed the spelling of various words in the past, why don’t we fix them instead of teaching a bunch of ridiculous spellings that make no sense like facade, ghost, llama, etc).
I know you mean well, but it’s fine to discuss your family at a level you feel comfortable. Your family is part of your experience in the world and that is fundamentally a part of your political perspective.
It’s not my problem that some people on the Internet want to insist they’re the expert on everything, even people, people they’ve never met.
When it comes to people, we should all try and keep an open mind about what perspectives might exist. These narratives that people are so divided, that Republicans are racist, greedy, and narcissistic, and that Democrats are handout seeking, weak, and naive … they need to be challenged (and first hand testimony is important but often seriously lacking).
If we’re just going to deny another person’s experiences are real anytime they don’t align with our world view … what’s the point of even being on a forum?
First off, it’s certainly possible that everyone in their family absolutely does love their interracial kids, but it’s also very possible they don’t; that is a dynamic I’d need to see to know. Behind closed doors, people change.
Yeah, I’m done, you’re blocked. You don’t get to tell me about my own family.
EDIT (for anyone else that actually wants to engage in good faith): Furthermore, yearning for the effects of a time period doesn’t mean you’re in favor of the effects that caused that time period. Someone saying “I miss when gas was cheap” doesn’t mean “they miss exploiting and bullying people internationally to get the cheapest possible oil” … they just want their cheap gas (and that’s assuming what you miss is even directly related to the other thing, you can, e.g., miss how there used to be more drive-ins in the 60s while acknowledging it’s great that we got rid of leaded gas).
Trump’s a conman, he won’t give them what they feel they’ve lost back; but they believe he will. This doesn’t equate to middle America being filled with racist. You can’t write off an entire time period as exclusively being good for some people because it was bad for others. People can (as an example) like things about the 50s and 60s without liking Jim Crow.
I have a side of the family that still supports Trump. That same side of the family has interracial marriages and there are black babies that are very loved upon (and no, it wasn’t some scandalous thing, the relationship and the marriage was uncontroversial).
Clearly, those members of my family are not voting for Trump because they’re racist and afraid of skin colors.
They’re (in my understanding) voting for Trump because the older members when they were younger had more economic opportunities and felt more attached to their community and their faith. I don’t agree with them on priorities, but it’s not racism, it’s in more ways a sort of nostalgia for a time period when life didn’t involve so many complex and nuanced topics.
Huh, TIL…
Why specifically are you a fan of XFS for network mounts?
Yeah, so in that case I’d just use ext4 or, if you want checksums, btrfs (though this doesn’t matter too much as btrfs currently doesn’t support raid in any real sense, so it can’t actually correct the data, just tell you it’s bad).
ZFS can do the checksums with RAID and error correction, but getting that on Linux (without using a specialty distro like TrueNAS Scale) is still a pain.
“*arr apps”?
Yeah this is either projection because they didn’t see the mainstream media doing it or an attempt to drive a wedge and create controversy where there shouldn’t be any.