Unless you’re using outdated server software, there’s nothing inherently insecure with exposing ports to the Internet. Be it port 80 or 443. Just keep everything up to date and maybe add fail2ban to stop people poking around.

+1 for INWX

Zabbix. It has native HTTP items and can do JavaScript and JSON processing on whatever comes back. All configurable via GUI.

The xxx3 seems to be a slightly upgraded version that adds a colour LCD and USB charging ports. Apart from that, it seems to have the same features as the one without the 3. And the -R seems to indicate a “restored”/“refurbished” model.

Did you configure NAT to the service(s) and/or DMZ to your internal server in your ISP’s router?

Not allowing even ping seems like it is against any sane networking configuration.

Hmm… I remember buying the license for ST2 back in the days and it specifically saying it’s for ST2.x only. However, it also worked for early ST3 versions but stopped working at some point. Which was when I’ve switched to something else.

After having been shafted by sublime text I will never believe anything called a “lifetime subscription” is such.

Care to elaborate?

AFAIR SublimeText licenses are always only for a specific major version. And they sometimes might work for the next major version. So, I guess you’ve just installed a newer version for which your lifetime license isn’t valid anymore.

I’ve got the same Geekworm cases for all my Raspberries. Added some extra thermal pads in some strategic places and have them all without any active cooling at room temperature (20-21℃). They barely go over 55℃:

The 3B+ has soft-throttling (can be disabled) starting at 60℃, full throttling at 70°C. The 4 starts throttling at 80℃ and the 5 at 85℃. So, with that completely passive cooling I’m still far away from these margins. No need for any moving parts that will make noise at some point in the future.

Also, since the cases have ribs on both sides, I have my Pis standing upright to hopefully make use of the stack effect - which might contribute to the slightly lower than OP’s values.

You can even use it to do the SSL part for a local non-SSL IMAP server. And, there’s a CrowdSec middleware as well, that will block blacklisted IPs.

it seems easier to manage stuff not in docker

Read into Traefik’s dynamic configuration. Adding something outside of Docker is as easy as adding a new config file in the dynamic configuration folder. E.g. jellyfin.yml:

http:

  routers:

    jellyfin:
      rule: Host(`jellyfin.example.org`)
      entrypoints: websecure
      tls:
        certResolver: le
      service: jellyfin

  services:

    jellyfin:
      loadbalancer:
        servers:
          - url: "http://192.168.1.5:8096/"

The moment you save that file it will be active and working in Traefik.

I’d like to track these things:

• movies/shows I’d like to see at some point
• movies/shows I have in my collection
• movies/shows I have watched (and when/how often)
  • and they should automatically get removed from the watchlist once watched

I believe TMDB only does the first. And self-hosting makes sure the data stays under my control and the service doesn’t vanish or gets paywalled anytime soon.

A gas-fuelled heating thingy.

Isn’t a thermostat essentially an on-off switch connected to a sensor?

Depends on your boiler. Some get a value from the thermostat depending on the difference to target temperature - which then makes the boiler control the heating intensity. And others just use an on/off kind of control.

In this place I’m renting here, there’s a Honeywell CM927 on the wall and a BDR91 which, indeed, seems to be just a simple on/off switch.

So, depending on your boiler, you could get away with a cheap Zigbee/Wifi switch module (mostly sold for lights - just make sure it has a separate switch circuit and is not sending live mains power to the boiler!) and feed room temperatures into Home Assistant via cheap temperature sensors. Then implement the whole heating logic in HA.

(nb. Most newer thermostats “learn” how long it takes to heat up the room to the target temperature and will adjust the starting time of the heating process accordingly. This way, you never have to change your schedules between winter and summer. This is also something you’d have to implement yourself, if you want HA to do all the heating.)

Or just something as simple as using a SMB/CIFS share for your data. Instead of mounting the share before running your container, you can make Docker do it by specifying it like this:

services:
  my-service:
    ...
    volumes:
      - my-smb-share:/data:rw

volumes:
  my-smb-share:
    driver_opts:
      type: "smb3"
      device: "//mynas/share"
      o: "rw,vers=3.1.1,addr=192.168.1.20,username=mbirth,password=supersecret,cache=loose,iocharset=utf8,noperm,hard"

For type you can use anything you have a mount. tool available, e.g. on my Raspberry this would be:

$ ls /usr/sbin/mount.*
/usr/sbin/mount.cifs*  /usr/sbin/mount.fuse3*       /usr/sbin/mount.nilfs2*  /usr/sbin/mount.ntfs-3g@  /usr/sbin/mount.ubifs*
/usr/sbin/mount.fuse@  /usr/sbin/mount.lowntfs-3g@  /usr/sbin/mount.ntfs@    /usr/sbin/mount.smb3@

And the o parameter is everything you would put as options to the mount command (e.g. in the 4th column in /etc/fstab). In the case of smb3, you can run mount.smb3 --help to see a list of available options.

Doing it this way, Docker will make sure the share is mounted before running the container. Also, if you move the compose file to a different host, it’ll just work if the share is reachable from that new location.

There’s a DVD rip on Usenet, it seems. 723.20 MB

alt.binaries.friends - according to usenet-crawler.com

Find a tool to properly convert them to .m4b format. This holds the whole book incl. cover and chapter marks in one single file. You can use HE-AAC or AAC-LC which are both superior to MP3 and result in much smaller files.

Does the data change a lot? Does it need to be a block-based backup (e.g. bootable)? Otherwise, you could go with rsync or restic or borg to only refresh your backup copy with the changed files. This should be far quicker than taking a complete backup of the whole SSD.

I’m using News Explorer for my RSS feeds which also supports subscribing to YouTube channels. In the newer versions it even pulls the comments from YT.

The power-on hours are shown directly on the Health Info page, no need to click through to the SMART attributes.

According to my Synology:

• WD40EFRX-68WT0N0 - 86,272 hours
• WD40EFRX-68WT0N0 - 86,207 hours
• WD40EFRX-68N32N0 - 34,417 hours
• ST4000VN006-3CW104 - 10,054 hours