a lot of stuff:

• owncloud
• paperless
• immich
• jellyfin
• jellyseerr
• traefik

than i have stuff only accessible from local, like the *arr stack.

i’m not using cloudflare or anything, should I?

the only exposed ports i have are http / https and a random port for ssh.

i also don’t use any sso… maybe i should set one up.

this is the way.

also fail2ban to ensure that nobody bruteforce it’s way in.

don’t be an asshole.

works for corporations, individuals, and everything in between.

i got one from GoDaddy, but i regret the choice…

i think they added the ability to force upload a photo in one of the latest releases, see it that helps.

otherwise yes, you have to delete that record from the db…

yes i agree

ohh thanks

the salary?? you will hear about it on the tird interview if you’re lucky

i hate this so much. i have applied to jobs with so generic job description, and than thay wanted a very specific thing. but no it was not in the job description.

what is wikidata?

you have “bot account” checked on the settings.

add fail2ban, so they cannot brute force the web interface.

interesting, even if they got access to the plex service, how they could have escaped the plex docker container?

i run pretty much the same stack as OP, but also run immich and paperless. i very much care if someone else have a way to access those…

ugreen is Chinese, but one of the good ones.

not really add.

when you set up an instance, all will be empty. the moment an user subscribe to a community for the first time, that community will start appearing on all, for everyone to see.

for this reason all is different for every instance.

the motivation for it is resources. if a new instance would receive updates from all the communities on all the instances, it would be very much like ddos. and a small instance will not be able to endure it.

i think is reversed… but it’s ok

right it still require root privileges…

well if you boot from a usb key and you have a btrfs file system, you could manually restore the snapshot. this would bypass the password

i don’t think it’s in the api. is in the DB, but not exposed anywhere. one instance admin could do query and see them.

are you using kube? or docker-compose?

of you are using docker compose, and in the compose file there is restart: always the container will be restarted if it disappears.

to remove it do docker compose down

well, it does have a high backend cost. They have to cover it somehow.