Wireguard works best for private traffic, but you can’t host a public site with that.

Of course you can! Nginx and wireguard on a VPS and actual services wherever you want.

If you can dedicate some time to constant keep up - pick a rolling distro. Doing major version upgrades has never not had problems for me. Every major distro has one.

My choice is Gentoo, but I’m weird like that. Having said that - my email server has been running happily on Arch for just over 5 years now.

The lemmy instance I host is on Debian testing - Gentoo was not available on DO - no issues so far.

Even when it’s mostly containers - why waste time every n years doing the big upgrade? Small change is always safer.

Is this the repo of the tool?

That’s not what I meant.

Never had a chance to give syncthing a shot, but nextcloud works very well. On top of that, if you ever want to ditch apple/google - it will also happily sync your contacts, calendar, etc, as well as more niche stuff like bike rides. It can become chonky, but that really depends on how much stuff you’re asking it to do.

Precision guesswork here, but I’ve had nginx (not on opnsense) redirecting me to the default host quite a few times recently - all times it was me cocking up its config. It could be that nginx is waiting for the actual target until it times out and then just gives a your opnsense gui as the most reasonable response.

I’d start checking its config. Or pasting it here, after removing secrets, it any.

Is it all or nothing sort of deal?

Dunno, worked well for me. Give it a shot and see if anything needs to be disabled.

I’d been running OPNsense in a VM for some time. I used xen as a hypervisor, but that shouldn’t really be a requirement. Passed the nics through and it was golden! All the benefits of a VM - quick boot-up, snapshots on the hypervisor - it’s truly glorious :)

I don’t have your requirements, but nextcloud with Memories works well enough for me. Nextcloud does the file things, including auto upload from phones. Memories then displays those photos.

NFS comes to mind, naturally.

I remember some years ago scp had a big issue, can’t recall what, though. But that made me have a look at rsync, and I’ve been using that ever since. Flags are a bit atteocious, but I’ve aliases rsync -avz status=progress to copy and it’s been happy days. One other benefit - incremental copy. Helps in cases where a copy procedure had been stopped for whatever reason.

I did mean your android system. I’m not on jellyfin, yet, so not familliar with uts quirks.

Does importing the ca not help?

This is ridiculously good :D

What is a recommended SSD nowadays? I don’t really have a criteria other than avoiding the noise - sata works well enough for me.

MG Premium has won its bizarre lawsuit against pirate site Goodporn.

I guess it’s that

I think this is the way!

Would be a real shame if my instance’s logrotate was set to, say, only keep a few days of webserver logs. Real shame.

Good luck establishing precedent with that!

Deluge is another client that supports sequential downloads. It’s my personal favourite because it’s also built on a client-server model, so I can have thr client on all my devices connecting to a single server.

I didn’t add it to any lists, but to the network interface itself. You know the output of ip a? The one pihole listens on (wg0 in my case, because wireguard) has something like, say, 10.0.0.1, but also 8.8.8.8. So when a DNS packet is spit out by chromecast to go to 8.8.8.8 UDP port 53 - my pihole happily answers that request. You could also do a separate unbound instance on a new virtual interface with a quad8 ip and just forward everything to pihole, if you fancy.