So my setup rigjt now:

• vps with headscale
• all devices connect to it
• in my home lab a vm running a tailscale client and a reverse proxy with a Wildcard cert
• all other services run as their own VMS and the proxy routes to them
• i have a dmz (not yet public) running a proxy with tailscale again for a different domain
• dmz runs a authentik vm which i use for access controll and user management
• backup Server connects to tailscale as well and proxmox pushes zfs snapshots every day

My long term goal is to move to pangolin as a reverse proxy on the vps and tailscale alternative and remove tailscale, as i find its very battery inefficient on Android (no subnet Router etc).

So i just give people access to the VPN and send them an authentik invite and thats it. With pangolin i dont even have to give them a VPN access anymore, it can be done via authentik i think.

A vps is 3-6€ and the tailscale standard is 10€ so its even cheaper, but a bit more setup to maintain. But it allows a ton of users :) so i guess this would be the smallest change with the highest impact

Authentik is nice to have but a pain to set up as the oicd stuff can be tricky. Immich was super ez, nextcloud was OK, docspell was a pain and ocis does not work with authentik becsuse they use different architectures for sso. (Ocis and authentik are a bit dumb here)

At this point I would rather use a Mac than windows I suppose. They are actually rather secure and are Unix which is nice.

But in general, if you don’t care about moral, being caught in an actively hostile eco system, have enough money, and being the little bitch of bog tech, Apple is quite nice?

I mean tbh what is a valid Alternative? Android, same big tech dependency, just different company. Samsung wannabe apple but in shit and more evil. Windows, same big tech, just incompetent company and evil on top.

So apple seems at least to be quite okish if you don’t have the skill to degoogle your phone and use Linux?

In my bubble, apple has very little bad press about security, had few bugs until maybe 2 years ago, then it got worse I think? And the device connectivity is pretty solid. If you have enough money, their devices are pretty high quality, from a manufacturing standpoint. And they slowly allow repairs on their devices again

EU states have handed over their own citizens to the US, if these people have hurt us citizens enough. There is a nice episode of the darknet diaries that just came out

I read up about it a while back, so anyone pleas correct me. It works like this I think: An audio sample is recorded, chunked into overlapping windows, which are converted into a spectagram (the black, blue, yellow, red image of frequency vs time). Idk at which point what is send to the server but to me it would make sense to keep the data amount low by sending after the next step: From the spectagram, the algorithm searches for high spots or notable “pixels” in the spectagram. It then notes the relative position between many spots, not only the next but lets say 10 per spot (propably more, as just a pair of 2 numbers are super cheap and small). We then hash these relative vectors. So we now have a list of frequency vs time vectors hashed in unique strings of our recorded audio windows. In the database we have all songs send through the same algorithm and stored. We then just compare our hashes from the recording to the database and find the song with the most matches.

Its pretty smart and I suppose there are additional filters to speed up the process and make it more reliable. Its just so simple, I love it

Haha i get that. I feel like proxmox backup server is really great together with proxmox though. And idk but I feel like there is not too much to do wrong? Correct me if you think differently, but we use a mirrored hdd zfs pool on pbs and pve, so we have 4 copies plus snapshots ob the backup server. So harddrive failure is not really a problem. And deleting or corrupting files or databases manually on accident can happen, but they can be revived sometimes or restored from last nights backup And yes, the backup server could die, but the drives should be fine still. And yes, it can burn down but then you have a mirrored drive on the home lab. I think its rather difficult to delete stuff on the bps on accident. I would just not delete anything manually. If its too full, either increase the pruning job for old snapshots or just put in a mother pair of drives.

Maybe I am cheap but its also fun I think. Also I feel like my data is actually mine now?

To throw in yet another opinion that does not help you right now: My friend has a backup server at his place and I have our home lab at my place.

Just a rough calculation: 2 8tb drives for a mirror is 150€ each (during a normal market, and when we bought it), so 300 combined. That is 60€per year if we assume they die quickly after 5years.

With a very light old desktop pc that is power efficient we can reach 25w

That is: 25w/1000 (for kW) * 24h * 365d * 0.35€/kW = 78€ per year of energy.

That is combined 138€/year.

The hetzner storage box is 24€/Month @ 10tb

So that is 288€/year.

So I would argue that its even cheaper to pay a friend to put a small old pc at their place and paying them 40ct /kwh is still cheaper than the clouds? Assuming you can find hdds at a reasonable price. But I could find cheap used offers with a runtime of 3y for 100€.

If you only need 1tb, its not worth it to run your own storage, as the power stays roughly the same:

Hetzner: 3,8€/1tb * 12m = 46.6€ So allone the power of running the backup server is not worth it financially.

For the 5tb plan: 12€*12m=144€ so that is the break even point I assume, as drives don’t scale too mich with price?