Navidrome over wireguard, and music library in folders and proper tagging trough beets and picard. using subsonic as a client for it. tried plex and plexamp but I’m moving away from them.

I use windows for 2 things - personal pc to play games, work laptop dualboot for excel usage if some super old messy sheets. everything else linux.

I was running most of them and added Sync - looked fine, but Connect / Voyager work fine for my personal taste, I’m just waiting for Infinity to come out with a full featured stable release. if dev wants to charge for no ads version or ultimate version, it is up to them, and up to the users if they are willing to pay them this. So, it all depends. I wouldn’t go ahead and attack them just because.

use dpkg -r to remove the packages:

openjdk-17-jre-headless:amd64 openjdk-17-jre:amd64 default-jre minecraft-launcher geogebra

Then install minecraft-launcher and see what it says. might be that openjdk is clashing with default-java.

my 2 cents just on this…

Check netmaker for wireguard vpn if you want a ui, but its straightforward to set it up manually.

I’d say, what kind of security are you talking about? Apart from standard HTTPS to keep things encrypted, there are other layers if you want to keep your service exposed to the internet.

Also how things are installed and if they are correct, proper file permissions. nothing different than having it on the server somewhere. You just need to keep thing up to date and you’ll be fine.

I like it here on Lemmy as there are quality talks from people and not too much circlejerking same concepts around. I actually like going trough here.

dank

About 6 year uptime on one machine before we shut it down and relocated.

Best option is to directly NAT traffic from VPS to your home server, either directly to your IP or set up a wireguard peer and send traffic via wireguard to your local and do the SSL/TLS termination on your local.

You are best exposing just 443 port on the VPS and moving that traffic over wireguard. Server will have your local public key on the server, and you could implement a wireguard key rotation to change them frequently.

Traffic sent back will be encrypted with the certificate, and even if they get the wireguard server key, you can rotate it, but still they will see encrypted packets.

It depends what kind of things you’re doing on your local. If it is just a website thing, then reverse proxy is fine. Anything other than that, NAT would be cleanest one.

LUKS on the disks would encrypt it the data on the block storage level, and, in theory, they should not have a way of reding block storage files directly. But since it is a VPS they can, technically, gather data from host memory.

Next step might be going down a dedi server route, Luks encryption on disks. Only thing thats needed there would be sufficient network pipe.