Yeah, both are fine. I switched away from KeePass because I was using Dropbox to take care of device sync, and it just didn’t feel right. Switching to Bitwarden was awesome for me because I self host it (Vaultwarden). It’s only accessible inside my home network, so mobile devices use a cached copy. If I need to add a new entry while away from home I can connect via VPN.

Use a password manager. Bitwarden has a specific “Card” entry type.

I doubt they’d mark non-dangerous, buried by the lowest bidder, no paperwork fiber cables. But you never know.

I wholeheartedly agree. These are not the class of people to be vilifying.

Ehhhh, zoning is super important. Vilifying someone by calling them “rich homeowners” is pretty weak.

Grocery delivery service sounds expensive… but I don’t know where you live.

I was going to recommend never keeping a balance in Venmo or the like, but understand sometimes waiting a few days for it to transfer to your bank can make things difficult.

Not trying to lay blame, but doesn’t Venmo ask where you want the money to come from every time you send money? They don’t know your bank balance…

Overdraft fees are evil. Some banks will even clear transactions to result in the most overdrafts without regard to which order the transactions took place. For example if there are two transactions, one for $100 and one for $5, and account balance of $50, they’ll purposely clear the $100 transaction first so both transactions trigger overdraft fees. They could clear the $5 first so only the $100 transaction triggers a fee, but nope.

Also, if this is your first overdraft you might have luck calling the bank and asking for forgiveness. I did that once in college and they refunded the overdraft fees.

I have Frigate running with a reverse proxy, a coral, etc. I just use the internal Intel GPU on my CPU and it works with a 1080p and a not-quite-4k stream (4MP maybe?). It’s no sweat for the hardware.

GPU is only used to detect motion, and you can even configure a lower resolution sub-stream from your cameras to reduce that load, but I don’t think you’ll need to.

Once motion is detected, Frigate fires up the coral to determine what is there. A car, dog, person, etc.

I have everything get recorded with no processing to a single WD Purple, the biggest I could afford. It holds months of video before rewriting over old stuff.

I have Amcrest cameras which are rebranded Dahua I think. I’m relatively happy with them, but I’ve always dreamed of owning Axis cameras, though they are a bit pricey. My cameras are on a VLAN that can’t access the internet.

Hope that helps.

I’m not an expert, but I think we need more information.

It’s safe until it’s not. I worked at gas stations throughout high school and college and saw a few gas spills caused by the auto-shutoff system not activating. In all cases the amount spilled was minimized by the pumper being able to turn it off quickly (even with the built in trigger holder engaged. A zip tie would take a bit longer, but you’d probably still be fine. Jamming the gas cap in would also be quick to remove. I’ve seen rubber things sold for this purpose, too.

I use apps on my phone, but have no clue how to troubleshoot them. I have programs on my computer that I hardly know how to use, let alone know the inner workings of. How is running things in Docker any different? Why put down people who have an interest in running things themselves?

I know you’re just trying to answer the above question of “why do it the hard way”, but it struck me as a little condescending. Sorry if I’m reading too much into it!

To access things outside of your LAN (for example from your phone while at the grocery store), each service gets a DuckDNS entry. “service.myduckdns.com” or whatever.

Your phone will look for service.myduckdns.com on port 443, because you’ll have https:// certificates and that all happens on port 443.

When that request eventually gets to your router and is trying to penetrate your firewall, you’ll need 443 open and forwarded to your Debian machine.

So yes, you have it right.

Also forward port 80.

That question is a little bit out of the scope of a forum like this. A question like that would better be answered by the nginx documentation. Sometimes the project documentation might have a blurb about nginx configuration specific for that project. For example, Immich.

For the most part, you only have to reference the nginx documentation. I’ve never looked at the Immich config above until now, and my Immich server works great.

I’ve had a reverse proxy for years, but the config files are very foreign to me because I use Nginx-Proxy-Manager. NPM makes nginx usable for dummies like me, at the expense of gaining a deeper understanding of how it works. I’m ok with that, but you might feel differently.

GitLab

Oh yeah, bummer.

Yeesh. I’m glad I have uBlock Origin and also AdGuard Home. uBlock Origin is much easier, but both combined means pretty much no ads in my entire house.

For remote access, wireguard is great. You can access stuff via their internal addresses.

One of the few podcasts I listen to sometimes. Wishing them well and thanks for all of the hard work.

Yeah, it’s hard to find good ones. You could invert it to 120v AC and plug in a regular charger, but you lose efficiency doing that, not to mention the added danger, weight, and complexity.