I am fairly confident I am not going to grant anyone access to homelab I do not know.

I for the longest time was an Apple fan girl but than the boycott the US stuff started happening and Tim Cook gave Trump that Golden Apple, I know it was just a bribe to keep their stuff going without to much pain but that was the straw for me. If I had the money I would have replaced my phone and ipad right than an there as well, but this is all besides the point.

I had an extra pi 5 just looking to be used so I flashed raspberry OS onto a thumb drive and plugged it into my TV I have Librewolf with adguard blocking all the youtube ads, my plan was to also have all my other streaming services in different tabs but the pi 5 does not have the power to do that well.

In a few weeks I hope to get a hand me down 2018 Mac mini that I will install Debian on and set it up as my TV box, it will hopefully be able to do better than my pi 5. I currently have a 2014 Mac Mini with debian running Jellyfin and my arr stack and it does a lot better than the pi 5 at that.

I personally have been getting away from Nextcloud, because I feel it tries to do to much and does not do any of it great, except maybe file storage. It is also has a lot of php in its coding, so I have other services replacing it, and because I do not yet have the money to replace my iOS devices with stuff that can run GrapheneOS or Linux I use smb for file sharing. I do have a inexpensive VPS that hosts my blog and off site backup and that same host hosts my email (easyDNS), everything else is held locally.

If you are running crowdsec I hope that everything other than your honeypot (on its private vLAN) is using something other than port 22 for ssh?

I follow the same scheme but I throw in random stuff to, incase I want a second account or extended free trials.

I have a domain name, if I wanted to create a professional website for a CV or whatever it would be cv.mydomain.ca I could change the auto forwarding away from my blog and just have some landing site.

As for emails no, I do not have one address, I make a new email address for everything (service name),(random Saskatchewan slang)(3 random numbers)@mydomain.ca if a email gets leaked or spammy I either have my server reply with address not found and delete the email, or the email just gets automatically deleted. I get next to no spam and I have extended free trials 2 or 3 times.

I used to get my email hosted by hosthero but they F’d me over the coals because they did not offer a wildcard email. I now have my stuff hosted with easydns who does have a wildcard option.

I personally have HA remind me to do stuff. An app I paid for years ago to remind me to do my drugs suddenly decided they where going to be a subscription app so I said F it and figured out how to do it in HA. I am a single lazy person who needs the encouragement to do things so I set up scheduled items to go off every ten minutes until I mark them as complete. If you have multiple people who need to do multiple things in a day I am sure you can set it up to only ring one device.

```` ```yaml alias: Watch Charge Reminder description: ‘’ triggers:

• at: ‘10:00:00’ trigger: time actions:
• target: entity_id: input_boolean.watch_charge_reminder_active action: input_boolean.turn_on
• repeat: while:
• condition: state entity_id: input_boolean.watch_charge_reminder_active state: ‘on’ sequence:
• data: title: ⌚ Charge the Watch message: >- { [‘Watch needs juice, eh.’, ‘Gopher tech check: charge the watch.’, ‘Prairie tip: a dead watch cannot mark anything done.’] random } action: notify.mobile_app_csa_orbital_debris_tracker
• delay: ‘00:10:00’ ``` ````

If there is something I want to find on reddit I just search the web and read from the webpage, sure I have not tuned my pihole to block all the ads out of it yet but it is so infrequent that I use it now. If I remember correctly reddit is weighed fairly high in my searXNG, I have a residential static IP so a lot of the big engines have blocked my searXNG but as I understand it they will block it even without a static IP. Bing is the big engine than I have and a bunch of little ones you would have to search out to find that get me my results.

I do not have much that I I cannot just rebuild and retune so I got a little VPS, to backup my irreaplaceables and host my blog all the docker images can be replaced the pi’s can be replaced.

The encription I chose was age, I had just asked Vibe what the best option for me would be, wish I had chosen differently, maybe some day I will sit my butt down for a few days and figure out a new strategy. I wish I had chosen differently because it is coded in Go.

Looking Go up to see if there has been any big issues found with it I see that other major parts of my homelab are also coded, in full or in part, with Go. Most importantly Caddy followed closly with Docker so maybe I will not worry to much about Age being coded in Go! Without Caddy, fuck this girl aint remembering port numbers.

Question for you, is there an off site backup of your stuff? If there is not an off site back up it aint backed up.

A little while ago there where 3 houses that went up in flames just down the block had the wind been blowing just a little, so many more houses would have gone up but had it blown just a little to the south I am sure my condo complex would have gone up. When the fire fighters told use to get back in to our places but be prepared to move I had all my devices and a few other things ready to go.

I thought how lucky I was to be home and the wind was not blowing, but I realized I needed an off site backup as well.

Is your NAS on site? If it is not backed up: I used to follow a 3-2-1 strategy, 3 separate copies, 2 mediums, 1 off site. I have sorta feel to a 2-2-1, I am wanting to get to a 2-2-2ish.

I was following a 2-2 strategy but then 3 houses went went up in flames down the street.

I am just really not a fan of it, I think it tries to do to much and does not do any of them well. You can setup seperate services for each thing that does just that one thing.

I have a bunch of pi 5’s running a bunch of services that replace all the Nextcloud things and much much more, I have a pi 4 running HAOS that backs up to one of my pi 5’s, and a pi 0 2 running cowrie. On top of that I have a Flint 2 running with a vanilla OpenWRT running a VPN and many vLANs, than I have a VPS that runs age encrypted backups and a few other small things off site.

Immich is what I used to get outside of iCloud, I do not remember if I ever used Nextcloud for photos. The reason I mentioned a few of the things in my homelab is to say that I have all the services and more to replace Nextcloud, while still keeping back ups with better security than Nextcloud.

I have almost degoogled all the way, I still have an account for youtube so that Google is. I have almost de-appled, I still have a iphone for another year and an ipad for some time longer. Why do I mention this? Same reason why I mentioned me not going through basic Nextcloud things, the Google and Apple do not touch my stuff. I have a finally tuned pihole setup to block more of Google and other trackers, I use searXNG to avoid Google to search the web. Why do I mention this? Do you use a hosted or a self hosted Nextcloud instance, if it is hosted there are likely trackers that see everything going in and out if it is self hosted and you do not have strong encryption there maybe trackers.

Sure a selling point of a hosted Nextcloud is encryption but there are ways around it let it be, brute force or social engineering.

Nextcloud was not my first selfhosted thing, I was paying a service provider for it when I started self hosting everything else I was already frustrated with how nextcloud did not play well with my homelab so I thought why the heck am I paying for it. I have never had good luck with Nextcloud.

Thanks for saying that, I have been loving immich on one of my pi 5’s now I am going to need to replace it. I am thinking Ente, just cause it is FOSS with paid tears just like vaultwarden/bitwarden.

I have stopped using Nextcloud because I can never get things tuned right, and I feel it is trying to do more than it should.

Sounds neat but I would be worried about the no shell stuff, I run my things headless for the most part and like SSH and occasionally VNC access.

Pihole is runs on pi zero’s I am sure you would not have any problemswith running it on your pi 4’s. I have my primary pihole instance running on a pi 5 with a bunch of other things, my secondary pihole instance is running on another pi 5 that used to run ghost which hosts my webpage.

I would say put pihole on both, also put unbound onto whatever one you decide is your main pihole. If you are going to get pihole and setup Matrix with the Whatsapp bridge may I suggest you get a firewall as well, something that you can flash OpenWRT onto. I have a Flint 2 that I have multiple vLANs setup on for security, but also a VPN so that I can have the benefit of all my services away from home. It is something that I wish I had setup a lot sooner.

Of course you will need a static IP address for this, for me my ISP gives them out for free but I understand that it is expensive elsewhere. I do however hear there are apps that emulate static IP’s for things like wireguard to use.

Don’t be stressing the pi out to much, maybe look into investing in more than 1 pi! I personally have had Jellyfin running on a pi 4, a pi 5, but it is currently running on a 2014 Mac mini (with Debian installed).

I have 3 pi 5’s, one pi 4, and a pi 0 2, an old Mac mini running in my LAN, and a VPS running my simple blog and encrypted backups. Shuffling things around is a thing you do as your homelab and services expand.

This hobby becomes an adventure.

Reading the comments, because I was corrius about what was happening. Sounds like one of the developers donated to a Nazi organization, which reminds me of the statement “you are at a club, resterant, party, or whatever sitting at a table with some friends and a Nazi sits down even if you and your friends are not nazis you are now sitting at the nazi table.” Does not matter if one of their developers is a nazi or if all of their developers are nazis they are still the nazi app.