Can you not just setup an nginx reverse proxy at the network edge to handle the ssl for the domain(s) and not have to worry about the app itself being setup for it? That’s how I’ve always managed all software personal or professional

No but there is a semi work around.

When using the app if you select all images one of your options will be delete from device when you click on that it will say hey some of these might not be backed up and one of your option is to only delete the things that have been backed up. It’s not automatic but it is a way you can kind of just Mass do it to everything

In its default state i think thats fair. Example docker bypasses most firewalls as it runs before iptables rules process. So if you don’t either use 127.0.0.1:port:port (many compose files offered by projects do not do this) or add specialized iptables rules to fix that up you can end up directly exposing services with meaning to or even realizing.

And yeah privilege escalation etc. There are solutions like what you mentioned but it can be a lot of work to set all that up so most people won’t

There is literally a thread somewhere on my Lemmy I need to try and find just recently that shows this perfectly. Someone made a thread asking how they can self host their images for backup from their phone and naturally everyone pointed them to immich. And they immediately started complaining and bitching that they could not access it from outside their local network. Instead of asking how to fix that they were like what the hell is the point if I have to be on the same Wi-Fi this is stupid. And they basically did not want to engage with the people being like hey you need to either make a reverse proxy or open a port on your router. They should not be self hosting

You need to open a port on your router for it to be accessible from the outside world (example your phone on LTE or a different wifi) , this is not a limitation of the software but a security feature of your router

To be fair until very recently immich would have been a horrible recommendation for someone that is completely new to self hosting because almost every other update was a breaking change that required you to carefully read before updating.

And even if you tried if your installation was old enough eventually your compose file would Drift Away from what main line was and you basically had to seek the help of the developers to fix it up.

It only just recently released what is supposed to be the stable line that should hopefully no longer need these large breaking changes

Meanwhile my costco milk seems to want to last a week+ past the date making me suspiciously sniff and sip it every time after the date

Oh, well that’s stupid and overreaching regulation. I can only imagine what the services cost when it’s forced like that probably worse than around here. Imagine not being able to install a new light circuit because you aren’t a certified electrician that’s nuts lol.

I can fully understand the roof part, that you can always get a roofing contractor for installing they will do it for a lot less and likely much better than a solar installer will. But the wiring is incredibly simple there’s literally just positive and negative on the solar panels. You just put them in series until you hit your desired voltage, then parallel strings after that. Solar panels use nice simple connectors that literally just click together, you plug those into some nice disconnect switches near the inverter and then from the switch to the inverter.

I did explicitly specify a non grid tie unit. An off-grid unit that does not do any grid feedback is literally no different than plugging a UPS in to back up your computer in terms of the impact on the grid . It will accept the grid as an input to pass through but it will never feed power back into the grid thus a lot of the red tape goes away.

Maybe it’s different in the UK but for the US a self consumption off grid inverter you do not need to even inform the power company much less be any type of electrician it’s only if you are doing a grid tie inverter that will put power back into the grid that suddenly there’s a lot of requirements.

DIY is the way to go. You will be able to get a dramatically larger system for the same price. I do not recommend grid tie it’s not worth the rebate there’s a ton of red tape and you will have to install an insane amount of extra equipment if you want to be able to actually have power during a power outage. Using an off-grid inverter with self consumption means that it’s basically just a computer UPS on steroids and it also removes a ton of the installation red tape that exists for grid tie inverters.

They are actually quite simple to install correctly to code and then for extra piece of mind you can have it inspected by an electrician which is way way cheaper than having them do the installation. I decided to spend roughly $20,000 on solar and for that money I got an entire pallet of solar panels 50 of them 30 KW hours of battery and 12kWh of inverter output.

Getting the solar panels installed is a hell of a lot of manual labor that’s for sure definitely one of the better workouts I’ve had in a while but when I compared what any solar installer in my area would give me for that price? It was a fraction of the system less than half the total solar panel output half the inverter output no batteries and most companies don’t want to talk to you about a system unless it’s gridtied.

!Ah, general kenobi!<

I think the missing key there is the independent statically built binary for apt that does not depend on pretty much any part of the base system actually functioning. That’s what I couldn’t find, is there one and I just suck at Google?

pacman is the best and I’ll stubbornly refuse to entertain any other opinion. It’s in my experience the least likely to just randomly rip the system to shreds. I don’t know if it has more through prechecks or what bit I’ve had debian and Fedora (apt and dnf) rip the system asunder trying to jump multiple major versions in an update of a system that hadn’t been online in a long time.

I don’t care if jumping multiple releases at once “isn’t supported” it shouldn’t be that frail and arch will happily update something many years behind as long as you update the keyring.

Even in the event your system somehow does get hosed you can fix almost everything by just chrooting in, grabbing the static pacman binary, and running “pacman -Qqn | pacman -S -” I’ve recovered systems that had the entire /bin wiped (lol oops moment with a script) and as far as i know apt and dnf have no equivalent easy redo all.

Already mentioned and ruled out unfortunately, unless you can find some documentation we couldn’t

None of the features i need exist in the community edition unfortunately. https://h-mdm.com/headwind-mdm-version-comparison/

Which seems to be a common thread with the “open source” mdms. Over half the actual useful mdm features are not available for the self hosted version

In what way? Why does management of tablets inherently require paying a third party to run the software

One of the documentation is mostly useless ones. Maybe I’m blind but i searched for 5min to try and find any instructions at all for their official docker image and found nothing. Seems they only want you using the cloud now even if you self host as i can only find aws or render documentation, there is also kubernetes but I do not have a kubernetes setup nor do I want one for just this single application.

Guess i can try to muck through the docker without instructions and hope it’s simple enough without any gotcha steps.

Personally what I do and what I would recommend is putting the reverse proxy on the VPS and having it reach out to the services over the VPN, rather than for security this is for performance reasons. Caddy and nginx reverse proxies can both be setup to cache static content. This helps remove the delay of reaching out over the vpn for some things and in my experience made a noticeable performance difference in services that had cachable content.

I mean i understand praising it, i still primarily use plex despite their Shenanigans and will VPN to bypass the remote streaming charge. I still have jellyfin installed but it has several issues for me still.

I have quite a large library and I still regularly have issues with matching especially on anime. It will either fail to match at all until I do it manually, or match incorrectly and I will have to manually correct it. I still frequently have playback issues for no apparent reason especially on Android where I will hit a file that just refuses to play back for no apparent reason with none of the error logs being particularly helpful on files that play perfectly in Plex with absolutely no issues, I have also been affected by the memory leak problem that has plagued many a jellyfin user. Where even if you’d simply turn the server on and never play any files it just randomly keeps growing in size more and more and more over time until the server hits oom even on a server with 128GB. This has been reported by so many users but the developers just seem uninterested in tracking it down. I have both friends and family that use my server and the device support is basically everything even remotely capable of media playback for Plex but is unfortunately just not as robust for jellyfin.

I know that in this particular subreddit I’m likely to just get downloaded for saying it but sometimes the open source solution just isn’t as good and this is definitely one of those cases. It’s been getting better has time goes on but it’s not a solid replacement yet for a lot of cases