Funny you should mention that.

I’ve used nextcloud for a while now, but it does suffer from jack of all trades syndrome. I’ve started offloading the things I use it for to other services that do a particular thing better. Syncthing for general file syncing across my devices, Immich for managing photos, Radicale for contacts and calendar sync…

If you’re just looking for an all in one Google Drive like experience for your files though, Nextcloud is as good as it gets.

I use Portainer and it’s a good UI, but I find the way they market business edition pretty scummy. Like having a banner ad constantly visible on the page, and having half the features visible but disabled with a big bright “upgrade to Business Edition” message next to them, and directly refusing to add any mechanism to opt out. I respect that they need funding for development, but they need to realize that a lot of their users simply don’t need a business license and aren’t going to buy one no matter how much advertisement you throw at them. The fact that they don’t realize that and refuse to budge indicates to me that they’ve stopped caring about the user experience of their product.

Sorry for the rant, I’ve been annoyed by this for a long time. Some day I’ll set up my own gitops pipeline, but that pesky day job keeps getting in the way.

Yeah, once I made the switch to wireless earbuds, I didn’t miss the jack at all. People have valid complaints about them, like the price and the limited battery, but I think the convenience is worth it.

This doesn’t directly answer your question, but highly recommend checking out https://trash-guides.info/

They have a ton of guides on how to configure and automate really detailed rules for sonarr/radarr. So, while it won’t help you verify the download matches the labels, it’ll make it more likely to get releases from reputable sources that are more likely to use accurate labels.

Definitely a consideration. In my case, the vast majority of my services are running in docker on a single host box, including the reverse proxy itself (Traefik). That unencrypted traffic never goes out over a wire, so for now I’m not concerned.

I’m not super paranoid about security, but I do try to have a few good practices to make sure that it takes more than a bot scanning for /admin.php to find a way in.

• Anything with SSH access uses key-based auth with password auth disabled. First thing I do when spinning up a new machine
• Almost nothing is exposed directly to the Internet. I have wireguard set up on all my devices for remote access and also for extra security on public networks
• Anyone who comes to visit gets put on the “guest” network, which is a separate subnet that can’t see or talk to anything on the main network
• For any service that supports creating multiple logins, I make sure I have a separate admin user with elevated permissions, and then create a non-privileged user that I sign in on other devices with
• Every web-based service is only accessible with a FQDN which auto-redirects to HTTPS and has an actual certificate signed by a trusted CA. This is probably the most “paranoid” thing I do, because of the aforementioned not being accessible on the Internet, but it makes me happy to see the little lock symbol on my browser without having to fiddle around with trusting a self-signed cert.

Yeah, the notion that no one uses torrents anymore is hilarious. I use both frequently. Usenet is great and has a lot of benefits, but it doesn’t hold a candle to torrents as far as breadth of available content.

It’s rough in the US. Most iPhone users will insist that iMessage is better and refuse to use anything else, and then whine when an android user is in a group chat and none of the features work.