I also did it with this.
While you can change it afterwards, it might be worthwhile to check a setting in immich on how it organizes the photos on disk you upload.
I changed it to year/month/photo-id because I find it convenient, but it does not organized them like that for backups.
You can change it at a later date and run a job to “fix it”, but it might be worthwhile to set it up correctly from the start ( if this matters to you ). So no harm done if you change your mind later.
I’m on board with this. It sucks and it makes things a lot easier to be able to have SSO.
But I’m also peeved the SSO tax is nearly always in the enterprise tier and never in the first paying tier. Even if you’d want to pay for it, the enterprise cost is usually a multitude in price with features you likely don’t need.
They just know companies have policies that enforce SSO for compliancy reasons and are forced to pay.
But as a self hoster the enterprise tier is even more disgustingly expensive.
But the open source projects we use and love also deserve contributions ( financially ). But as a self hosted there’s also a financial incentive to self host and not take everything as a SaaS ( besides the obvious take control of your data ).
Edit: I mean I agree with the selfh.st statement and yours ( for clarity)
The best is pretty subjective and partially relies on what you need.
Keycloak is one of the most feature complete ones I think.
I’ve used authelia before and liked it, but it had a very bare UI and everything was done through config files which forced redeploys on changes. It wasn’t ideal for me.
I’m currently trying out voidauth. It’s got some more Ui features compared to authelia and can apparently also simulate some Active Directory queries to forward your users to third party tools for provisioning ( unless I saw that wrong, I haven’t tested any yet ).
Authentik looked nice, but I haven’t gotten around to checking that one out yet.
Signal used to do text messaging as well but they removed the feature. As they felt it was unclear when a message was fully encrypted ( signal message ) and when it wasnt ( text /RCS message ).
I don’t think there’s a privacy friendly chat app that also does RCS.
How do you mean merge?
It’s basically another messenger.
Signal is a great app to replace your messenger with. Keep in mind that it doesn’t save whatever media you post there in your gallery.
Matrix is another solution, but you’d have to self host that. I have no experience with it.
Threema is a swiss app which I think was pretty privacy respecting as well? It doesn’t use phone numbers either IIRC.
There is also this: https://github.com/alangrainger/immich-public-proxy
I think your immich gallery can even be private ( though the public proxy would need to be able access it ).
I have no experience with it though.
How do you enforce consistent backups of the database? Do you dump the data periodically? Copying the data on the docker volume won’t give you consistent ( and possibly corrupted ) backups IIRC if the database itself isn’t stopped.
Email notification and the like usually don’t work out of the box and require SMTP configuration. This is usually available in the app admin consoles or configurable through Environment variables in the console.
I’m not running it ( and I haven’t checked it for Monica HQ ), but those would be the first things I’d look for.
The .env.example file shows SMTP settings. The example file notifies to a logfile rather than an email.
https://github.com/monicahq/monica/blob/main/.env.example
# Mailing
# Set the MAIL_MAILER to 'smtp' if you want to send emails.
MAIL_MAILER=log
MAIL_HOST=smtp.mailtrap.io
MAIL_PORT=2525
MAIL_USERNAME=null
MAIL_PASSWORD=null
MAIL_ENCRYPTION=null
MAIL_FROM_ADDRESS=hello@example.com
MAIL_FROM_NAME="${APP_NAME}"
MAIL_REPLY_TO_ADDRESS=hello@example.com
MAIL_REPLY_TO_NAME="${APP_NAME}"
I have no clue as I’ve not set this up myself unfortunately. :(
There are also certain Linux distros have SElinux enabled ( like red hat or fedora ). This could also block docker from accessing the file if it is enabled.
You’d have to search online how to set a policy in selinux to allow it.
SElinux does not appear in Ubuntu/Debian based distros.
Easiest check would be to run getenforce. If it works and it returns 1 it’s enabled and possibly the culprit.
You can try running your docker after running setenforce 0. This will temporarily disable it until a restart IIRC. You can enable it again by setting it to 1.
I wouldn’t recommend disablint it permanently
I think if the source path doesn’t exist, docker will mount a directory ( IIRC, but not 100% sure ).
Can you triple check if the path to your wg0.conf file on your host actually exists and that the path is definitely correct?
stat /home/docker/test/Wireguard/wg0.conf
That’s cool. I’ll look into that
Here’s an alternative: https://www.opendesk.eu/en No guarantees though. But it looks nice.
I’m not affiliated with opendesk in any of way
Interesting. Thanks for that insight :)
Personally? No I’ve never bought a cert before. Given there’s free alternatives and it’s a homelab it doesn’t make sense. Otherwise I’ve used them on AWS, where ACM also just provides them for free.
What you’re saying is that certificate providers will still charge you and provide certificates for a year, but just provide you with N certificates to span that year?
E.g. if the duration is 45 days then they will give you 365/45 certificates ?
Don’t worry they’ll reduce the cost of certificates proportionally to the longevity of the certificate.
Right? Anybody?
<< Cricket noises >>
Edit: obviously not LE, but other certificate vendors.
Hetzner has been solid for me ( and eu based if that is relevant for you ).
Connections timing out have always been a firewall issue for me.
Client sends packet, firewall drops packet, client waits for a reply that’ll never come. Client times out.
I would check firewall logs or temporarily disable it to see if it works without it.
so yeah check the firewall on the server, the client and in between ( if any ). That’s what I would do.
I’m trying to wrap my head around your comment to understand. What exactly do you mean by supply chain sploit risk?
The tool is using 3rd party libraries and those libraries could be used to introduce vulnerabilities in the app?
I think it’s MAC based, but I’m not sure
Specifically talking about the FireTV, 99% sure the app doesn’t have a Killswitch, I’ve checked. I use it all the time on PC and Mobile though :)
Ah! I can’t get a fire stick here so no experience with that.
Setting up the VPN on the router sounds great, but can home routers (I have Cox) flash VPN software on them (thought they couldn’t)?
The asus router I have has a feature called VPN fusion. I specifically bought a set of routers for my home that are in front of my ISP router because I wanted a single SSID and wanted to set my own DNS servers without having to specify them per device . They (ISP) keep restricting features on their router ( can barely do anything on them nowadays ). Also switching ISPs became easier as any config is done in my devices rather than theirs.
Also is it MAC or IP filtering (would I have to set a device to static IP) for deciding which devices use the VPN tunnel? How good is it about switching servers (like if a server I’m connected to is on maintenance or is overloaded)? Not too worried about the web issues, can always hop back on the regular Wi-Fi and use the app.
I THINK it’s Mac based, but I really can’t say. I named the devices on my router and they keep reconnecting as the same device. Either that or it uses some combination of info from the device to identify it.
E.g.: my work MacBook should switch MAC addresses every time it connects to a WiFi, but it’s consistently identified by my router.
Additionally, they have some routers that are supported by custom firmware ( asuswrt-merlin ). Mine don’t support it unfortunately. https://www.asuswrt-merlin.net/
My supernote hasn’t advertised anything ( besides an occasional marketing email ): www.supernote.com
Category: e-ink device ( read+write ).