Time to switch to Plan9!

I don’t want to sync files at all. I want files to only be on the server, accessible via web interface. Like Google Drive.

Yeah, that’s what I was doing before when it was just me. But, my wife isn’t gonna wanna mount an SSHFS. It needs to work like Google Drive, meaning web interface.

but if simple is what you want then a Synology DS225+ should get you up n running quickly

Ah, I forgot to mention I’m already running my own Debian server. Ideally, I wouldn’t have to buy another device just for online file management.

Which part of the seafile install was it that made you back off?

There’s proxies behind proxies behind proxies that proxy to proxies so you can proxy while you proxy.

I managed to install half of it, but then some of the many servers you need to install didn’t end up talking with each other. I tried studying the architecture for a bit, but still couldn’t figure out which server’s request I needed to rewrite in order for the other server to see it.

Holy fuck! Noice!!!

One thing that worries me a little about fluxer is this:

Finally, we can offer commercial licences to companies that want to run Fluxer internally without being bound by the AGPLv3 copyleft terms. This is enabled via a contributor-friendly CLA, but it doesn’t create a separate “enterprise edition”. It’s still the same Fluxer software everyone else uses.

• https://blog.fluxer.app/how-i-built-fluxer-a-discord-like-chat-app/

They have a CLA on contributions. So while today Fluxer is licensed as AGPLv3, tomorrow they can pull the rug and change the license, just like everyone else has been doing.

I’m not sure which horse to bet on Stoat or fluxer.app.

God damn it. And thank you!

Arch, on well supported hardware. That means no Nvidia. No Ultra 5 series CPUs.

What about connectivity? I’m currently using Tailscale cuz it’s so easy. Maybe I should look into WireGuard? Also, how does Headscale fit into this?

Does anyone have a good guide for installing Seafile? I tried installing it a few months ago, but it’s so damn complicated with load balancers behind load balancers and a bunch of services tied together.

I gotta try again.

I don’t know anyone who works in tech (not IT) that is allowed to use Wangblows for development. If you’re a programmer/software developer, you’ll 1000% have to use Linux, either directly or indirectly. From small hardware devices, to automous cars, to simple web sites, all of that uses Linux. Lots of places give you a Linux laptop or at the very least give you Mac—because they consider Mac close enough to Linux. I’ve never needed to use Macroshit Office Suite for anything related to work. Zoom and Slack are the standard in Silicon Valley and both work fine on Linux.

How the heck did you install Seafile!? I spent a whole day trying to get it to work, but there are so many moving parts and proxies behind proxies behind proxies. I managed to get the UI to load, but other parts of the app didn’t work. I want to like it, but it seems pretty complicated to install… 😢

Ufff. Yeah, I also hit a slop mountain of videos when searching for Seafile comparisons…

Frigate + Reolink (or actually Frigate-approved cams)

You know. mTLS might be an option. I have a tiny number of clients. Laptops and Android phones, seems easy to install a client cert. The part I’m not sure about is TVs… Does Nvidia Shield or Firestick allow installing client certs?..

Oh, wait and also: https://github.com/jellyfin/jellyfin-meta/discussions/96

Also like Ente uses: https://github.com/ente-io/ente/pull/7945#issuecomment-3538457041

Harden your server first

Do you have any tutorials or guides on this handy?

Use your router/server to block some counties using geoip

Yeah, definitely all my users are in the same town/region/country as me. So this could be doable.

Configure rate limits in Nginx

Hm, currently using Caddy as my reverse proxy. I guess there’s some module for this.

only open ports in your firewall you really want to open

The only port I need open is 443 for accessing Jellyfin and Immich. I can definitely block 22 from the public internet. And fuck it no automatic redirects from 80 to 443. TLS or bust.

GAAH! OK! I’M NOT CRAZY!

The exact same thing is happening to my wife’s phone. We’re both on Pixel 8s, have the same VPN settings, but for some magic reason Tailscale breaks only her phone. She has to turn off Tailscale and reboot her phone to regain connectivity.

These shenanigans is why I’m considering just exposing things to the public internet. I’m using Tailscale on several device types and Tailscale adds friction to all of my devices (except Arch where everything always works).

I understand the friction is there for a good reason, but my family doesn’t. They just see that Jellyfin doesn’t work and that all of this is buggy and maybe they just should sign up for Netflix instead of dealing with all of these bugs.

“roaming” device is always connected to their “home” network by VPN

Ah, right. Well, currently I do have my wife’s and my phone on the Tailscale VPN. The issue I’m trying to solve is that the VPN app on Android (and other environments) isn’t 100% bug-free. For some unknown reason, my wife frequently has issues with Tailscale. It’ll break her entire networking on her phone. The only way to fix it is by rebooting her phone. I have no idea why because we have the same phone and the same settings and it works fine on my phone. I’ve tried turning off Tailscale, logging out, and back in, and the network won’t recover. Sometimes the Tailscale app won’t even trigger the SSO page to sign in. So it just stays permanently logged off.

The Nvidia Shield also has similar issues where I have to fuss around with the VPN.

So at this point, I feel like I’m done debugging VPN apps and maybe it would be easier for users if I expose stuff to the public internet. Obviously, it makes management for me harder, but that’s ok if everything Just Works for everyone without extra steps or without having to reboot your phone every week.