Finamp is good for android and has a flatpak

I’ve had mine on latest for about a year and I haven’t noticed any issues… I have a cron job that pulls it every night too

Your own domain, but you’re safer not hosting your own email servers in general. Just wanted to be clear for anyone reading this. If your mail server is down you don’t get mail 🫠

I ended up using a service that isn’t Google for that with my own domain

Even on something like tor browser or tails?

You’re saying law enforcement can easily fingerprint you? Or am I misreading what you’re trying to say?

I definitely don’t suggest self hosting email unless you don’t care about losing messages occasionally

Tor itself may not be, but private users are competing against NSA resources or something

Take everything I say with a grain of salt. I don’t think the protocol itself is broken with enough people doing exit nodes, and I think normal people will benefit from privacy granted by tor.

But I bet with high certainty that if the NSA wants you it can probably find you.

The below YouTubers I’ve seen before but I also can’t independently verify whether they are just click baiting or not…

https://youtu.be/pvBAaUPzvBQ

https://youtu.be/Ml99dXffRXk

Pretty sure tor is a honeypot… Not sure the alternatives though

Edit: maybe honeypot is not the right word, but at the nation-state level this won’t keep you anonymous I’m guessing. Good for normal people who want more privacy

Yeah jellyfin just isn’t as good. After having issues on LG webos where captions won’t load for like 5 minutes and dealing with that for like 2 years I gave up and went back to plex.

I do like how jellyfin can stream av1

Yeah what you’re talking about is a DMZ, it still won’t help a ton if you don’t have strict firewall controls inside your network too.

I just use wireguard with firewall rules to restrict to just my server with my docker containers on it and my DNS

I still use a reverse proxy, but to get into my network you need to be on VPN. It’s more secure for me I guess.

I use traefik forward auth, even inside my network on VPN, for an extra layer of security for some apps.

My opinion is that port 443 getting accidentally misconfigured by me is just too likely a scenario. With wireguard on my router I also am able to restrict traffic to ONLY my webserver and DNS servers for my devices.

So I guess that’s another positive of wireguard, you can use your own DNS servers for all your phones all the time and always have ad blocking with pihole or something similar, even on mobile.

By using VPN I don’t have to worry about accidentally exposing a website with a copy paste error or something over my reverse proxy. I can also easily restrict who has access to my VPN and do routing rules from my router per device or subnet (for people who aren’t in my family I have a separate subnet I assign with more strict firewall rules)

If this server is publicly accessible and gets pwned, they can use it as a jump box for your internal devices.

Just close 443 and use VPN with ACME DNS challenges for your certs. That’ll help make it even more secure, nothing is full proof though and a VPN is a good first step

Only if you hook up a torrent client. There’s no requirement to do so

For jellyfin/Plex you can try downloading everything with lidarr

Self hosting email is a terrible idea. Your Internet goes out? All your emails are black holed

I switched to Kagi like 6 months ago and I still love it. Almost never have to go back to google except for maps.

In case anybody sees this, you can use your normal TV remote with a pi

https://pimylifeup.com/raspberrypi-hdmi-cec/

I wouldn’t put android TV. Kodi has plex and jellyfin addon and definitely won’t have ads ever, or if it does it’ll quickly be forked

Yep, everything is fucked. You can put kodi on a raspberry pi though I guess