Just discovered TinyAuth and it is fantastic. I am replacing Authentik with it because it has what I want but is much faster, smaller, and simpler. Also, the license is FOSS.

To shreds you say?

You don’t need DHCP, you can just use DNS and then set up different blocking groups based on the device.

The problem with this solution is that is it opt in. You would need to change all the wifi settings on each device separately to point to Pi-Hole as the DNS. This is something that could easily be disabled as a 12 year old would probably be able to figure out how to change the settings on their mobile devices or computer with a Google search.

Anything by Janes Combat Simulations.

I don’t host my media outside my local network but, if I did, I would use my go to method of SWAG with Authentik. This is what I have done for my other self-hosted items.

I don’t know of any comprehensive source but there are a few basic things you that I do.

1. Ensure sudo is on the system so that root account is not used.
2. Get a secure browser that with add ons to protect against malicious sites (https everywhere, JavaScript blockers, etc…)
3. Download software from trusted repositories and verify with GPG keys or hashes. Be wary on installing anything using a shell script with super user access.
4. Use keys instead of passwords for ssh if you are going to use ssh.
5. Password tools like Vaultwarden and KeePass can help secure passwords.
6. You can encrypt your hard drive with LUKS before you install Linux with many distros.
7. Flatpak (Docker as well) can allow you to run applications with limited access to your system much like phone apps on Android. This can be more secure but comes with larger app sizes and limits what you can do with the app sometimes (e.g. browsers not being able to upload files because they don’t have full filesystem access)
8. If you want a firewall on your workstation (not needed much anymore with hardware firewalls from routers), UFW makes it easy
9. If you want to check for viruses use ClamAV (ClamTK for a GUI app).

A raspberry pi 4 or 5 and some fast USB 3 hard drives.

https://www.propublica.org/article/3m-forever-chemicals-pfas-pfos-inside-story

They knew.

PyLoad isn’t a container I run 24/7 because the use cases are a bit limited. Basically, if I have a large list of files that I want to pass to my NAS (perhaps a list from something like DownThemAll) that won’t complete in a short sitting, I will pass that list to PyLoad so it can just run the background.

I once downloaded about 2,000 or so office files and tools like this have let me do that automatically.

Exactly, since KasmVNC can run GUI programs in the browser and the Linux server.io base image is just Debian, it was trivial to just run it with Emacs instead. I much prefer Emacs over VS Code because of Org Mode. While VS Code works well in a browser. It isn’t what I wanted.

Here is where I have posted my Emacs Dockerfile. It might be a little out of date. Emacs Docker

EDIT: The Dockerfile also installs the fonts I like for Emacs along with git and hunspell.

EDIT: You could also probably achieve something similar with a Docker container run ning Apache Guacamole.

You can use the Linuxserver.io VSCodium Image and replace VSCodium with Emacs in the Dockerfile.

• Calibreweb
• FreshRSS
• Grampsweb
• Emacs
• Gitea
• Stirling-PDF
• Vaultwarden
• Pihole
• Pyload
• Glances
• Syncthing
• Homepage
• Karakeep

Firefly III is an option, but I found it difficult to set up and the importer tool works well for Europe but not the US.

You could also just create your own Docker container which has Skrooge, GnuCash, or KMyMoney in it. I have done this with Skrooge since it imports data well and is simpler than GnuCash.

With the Linuxserver.io KasmVNC base image and install any GUI application to run it from a browser.

This argument in this article is poor. An analogy would be:

“Because donating free food to the poor might feed future criminals, we should no longer provide free food.”