I personally would be hesitant to host Immich publicly until they’ve done a security audit. The risk of accidentally exposing my photos publicly is too big for me.
That’s why I recommend using Tailscale or Wireguard directly. Personally I’m using Wireguard for me and Tailscale for other people I want to easily access my services.
You’re likely right, it seems like they made use of the code being open-source and distributed it freely after getting access through patreon. Each commit is quite big with all the source code changes of the specific early access build.
Someone pedantic: It’s source-available, because it doesn’t grant the necessary freedoms to e.g. redistribute and modify the code.
The features weren’t exactly paywalled, as the source code was always available. They merely provided beta builds to patreons, that were also available free of charge by someone else [1].
~~[1] https://github.com/pineappleEA/pineapple-src/releases~~
Selling emulators is legal, as far as we know (been a while since the last ruling). If it’s true what others have pointed out, that yuzu devs were distributing copyrighted material in their public discord and talking open about privacy, then Nintendo has support for their argument that yuzu was intentionally designed to circumvent copy protection and purposely facilitates piracy.
The global IPv6 address is usually not directly reachable from the internet for incoming traffic. There’s still the router with a firewall which blocks all incoming connections, so having an IP for each device doesn’t make a difference for security.
With IPv6 ports still have to be forwarded on consumer routers by default, the main difference is that it doesn’t have to be translated to a different IP.
This also means I can have multiple hosts on my home network listening on the same ports, because their public IP’s are different.
Immich has breaking changes too often, so I disabled auto updates for the server and phone app. Updating every few months with backup beforehand is a good tradeoff for something as important as images.
Reading patch notes is especially important with some Immich releases requiring minor admin intervention, e.g. running an extract metadata job.
I’ve enabled auto redirect from twitter to nitter and never bothered to disable the no longer working redirect. Hopefully people switch to some platform with open API access (or rather, a federated platform)
I’ve added a keybind for deleting history, but it’d be great to have a way to specify short lived clipboard entries. But this might also be one of those standards that no one implements.
Wayland only keeps the clipboard until the application exits. This means a clipboard manager is basically a requirement. Iirc desktop environments might solve those issues by default, but on a standalone compositor just add a clipboard manager and enjoy the history.
Whether a device is wired or on wifi matters on some routers, because some routers have wifi and wired devices on different subnets by default. It’s unlikely, so I wouldn’t worry, unless you notice accessing it only works wired.
As a middle-ground, I think it’s enough to only sync the community name and user count and maybe the description. More isn’t shown in the search anyway and those 3 data points shouldn’t take too much storage.
Syncing name solves the problem of communities not showing up. The problem with only being shown posts in a community someone on the instance has already subscribed to is more difficult, as you wrote.
Iirc Plex supports transcoding for downloads, while Jellyfin only allows downloading the original file. But I’ve heard transcoding downloads is broken on Plex, so ymmv.
Intro skip is only available as a plugin on Jellyfin.
Also, Findroid has a better ui and supports downloads, while the official app has more features (ie. settings/admin panel).
I feel like most of these “10 alternatives to xyz”-articles are basically a summary of alternativeto.net. Or they’ve just listed all projects they’ve found with a quick search. I’m almost certain they didn’t install them most of the time.
This also applies to “comparison” sites, which usually are a list of Amazon affiliate links. At this point, I don’t trust websites with affiliate links anymore, as they’ve never actually tried the products. Sadly those spam sites make it difficult to find actually good reasearched tests.
Back to itsfoss, they write many articles, and some are good, but they still are blog spam.
If I’m cooking, I make enough for a few meals. It takes a similar amount of time and it can be stored for a while in the fridge.
Also I don’t think hello fresh is able to have lower prices than supermarkets, and it’s easy to find recipes online. I won’t be surprised if those services go bankrupt in a few years.
Edit: I can’t recommend SponsorBlock enough. Hearing the same sponsor message again and again is incredibly annoying.
Off topic: ff2mpv is awesome. It supports many video sites (I believe everything youtube-dl does) and opens the video on a page/link in an external mpv window.
This helped me mirror a video without downloading to read the embedded subtitles (why uploads a mirrored video with subtitles?). Also playback speed and all other advanced features mpv supports are really useful
Or simply set up wireguard.
At least I suffered from terrible battery life with Tailscale, while 24/7 wireguard isn’t even showing on the battery stats.
Wireguard is awesome and doesn’t even show up on the battery usage statistics of my phone.
With such a small attack surface I don’t have to worry about zero days for vaultwarden and immich.
Linux phones aren’t supported because it’s an Xorg feature. Usually Linux phones use Wayland for the better (touch) experience. If someone wanted to they could implement it on a Wayland compositor, but given that no other OS I know of supports diagonal mode, I wouldn’t hold my breath.
The DNS-01 challenge [1] allows for issuing SSL certificates without a publicly routable IP address. It needs API support from your DNS provider to automate it, but e.g. lego [2] supports many services.
I personally leave my Wireguard VPN always on, but as its only routing the local subnet with my services, it doesn’t even appear in my battery statistics.
[1] https://letsencrypt.org/docs/challenge-types/#dns-01-challenge
Immich recently changed license from MIT to AGPL. As far as I understand they can’t sinply relicense to a non-free license unless they redo a good chunk of code from the last half a year.
If they still used the MIT license I’d be worried too.