Fuck that cancer site giving you the option to either give them all data or go one by one over 200 “partners” and disable them.

They do.

I don’t think the point is that you can sue them if it only lasts 13 billion years, but the under current conditions it’s projected lifetime is 14 billion years. Which is a very big number, meaning it’s pretty much guaranteed it won’t break in 100, 1000 or 10000 years.

Same for batteries.

Any volunteers for testing the claim?

I mean, if a single distro is what we’re after, isn’t there already ChromeOS?

How about no? If you want a web app, at least go to the trouble of writing a proper offline PWA. It behaves like an app and doesn’t force you to have a second, insecure copy of a browser.

Gtk?

I mean, Syncthing is much more than that. The great thing about it is that it works no matter where you are - home wifi, over the internet etc.

But that means that someone else’s server is used whenever you leave your home network.

I mean, forever might be too strong of a word.

Well, that’s why you’ll have to try out. Or ask someone to at least try whether it opens, the apps mostly either fail on start because they require a Google certified Android, or they don’t fail at all.

Though it looks like that could change eventually with a Linux phone.

SailfishOS is mostly daily drivable, depends on which Android apps you need (there’s a compatibility layer to run Android apps on it), with bank apps it’s often a problem.

Now try the whole GOG catalog.

That really depends on the implementation. In the case of gluetun, yes, no data can leak.

In Linux, by interface binding, no data can leak as well. No idea how Windows network stack is implemented.

Well, in some countries carriers don’t have a say in that.

Back to my trusty Xperia with SailfishOS, I guess.

Oh, fuck off Nothing, you were to be my next phone! Now I need to find a different European brand which does high-end smartphones. Which means only HMD remains unless something changed in the last few months.

1. Install Caddy on the host
2. Configure each service to forward to unique ports (say, 5001 for one service, 5002 for a different service)
3. Inside Caddyfile add a block like this for each service:

service1.example.com {
  reverse_proxy localhost:5001
}

It can be done in Apache as well, but Caddy is simply better and simpler.

As for images, take a look at Immich if that’s something you might want.

Monthly unless I learn about a vulnerability that would require it sooner.

What’s gluetun? Seems like it’s a VPN client? What’s special about it?

Gluetun can connect to multitude of VPNs, but most importantly it can be used to force other containers to use only the gluetun network, meaning if you disconnect from VPN for whatever reason, the other containers don’t suddenly send data over non-VPN network.

So if you’re torrenting and use gluetun to provide internet to the qBittorrent container, you won’t accidentally reveal your real IP if your provider’s server goes down for a few seconds.

How do you use it in your setup?

Configure it to connect to my VPN, create a file with the public port it uses, configure qBittorrent to only use gluetun for network and some script which reads the file with public port and changes it in qBittorrent.

Do I need to know about this if I use Tailscale on the host for connecting to my VPN?

Depends. I like having everything container related in the containers. Sometimes I need to do something without VPN, this would limit me. Also, if you don’t configure disconnect on VPN connection loss in a different way (interface binding), you risk revealing your IP.

Would gluetun allow me to use an additional VPN provider for certain apps without messing with the host Tailscale?

Yes. Though you would be double VPNed: App -> gluetun -> host VPN -> target server. That would probably add some latency.