“not enough space in the used server for a standard power unit”

I wanted to put a dedicated graphics card in there for interference experiments - but the server is, well, a server - and those high availability PUs are expensive and a hell to cable manage

But a Dremel I had at hand … And a second PU as well. Now my server has a second power unit which is only powering the graphics card and is short circuited to be always-on.

self-made problems require self-made solutions.

In short: yes. You can tune these values when self hosting - it basically changes the b chance which tokens will be used under which circumstances.

The issue is the whole UX behind it. I have yet to see someone review the 30th prompt of “grep” - there is no same default or middle ground.

For example whitelist read actions or harness side limitations to the project folder.

This is just lazy - again. “Users don’t use or very bad security feature so they just want us to disable it”.

Sounds reasonable. I’d you, like me, need to protect yourself from sabotaging your own system you could even make NAS documents read only to force a manual step in before editing there.

For me the amount of items that should be there are zero following my own concept … But for some (especially shared sheets specifically) I’m too lazy.

Perhaps I should listen to my own advice here zzz

Paperless specifically: yes, shoving everything in it.

But I have honestly no idea what kind of data you have that are suitable for paperless AND have different versions.

I just checked mine, for me it’s… Zero. Not a single item, by definition, is in Paperless that can receive an update.

If it’s updatable personally I have everything version controlled - and I mean EVERYTHING, from CV over tutorials to construction ideas - hosted locally on forgejo.

Hey, Welcome! You’re having a wonderful and sometimes exhausting journey in front of you :)

I’ll just brain dump based on your questions and my associations. Hope something useful is in between!

First the basic setup options because they tie into how to handle your date flow:

basic Most popular I think is docker compose: here I suggest splitting it into one compose file per service though with one file holding your port config. This prevents you yourself getting confused by your port mappings :)

Second in line is a proxmox setup - similar vein and I lack the hands-on experience to talk about the difference.

Then there’s the “everything native” approach where you don’t rely on containers but manage it yourself or via a dedicated OS that makes life easier (after the learning curve) like nixos.

DATA

All this foundational stuff is important because it changes your approach. In general: don’t fear data duplication. Duplicate it until you learn where you want your data to life and only then define your flow.

Specific example: after I got used to paperless I don’t look into my opencloud anymore, at all. I still duplicate them there but as distributed backup, not for consumption.

If a dataset has a clear place ten it’s easy. If not then your options are different depending on your setup: For the *arr stack the official recommendation is to use one shared folder and mount that into each part for example. I personally don’t like that and have hard links for everything - that’s basically a pointer to the file that looks like the file itself everywhere. As long as one pointer exists the file still stays on your drive but when the last pointer is gone, the file is effectively deleted. On Linux, you can think of every file this way but by default only one pointer exists (which often people test as synonymous to “the file”. Drawdown: this only works really well if you manually keep either track of which tool links where or you don’t containerize everything.

Again a specific example: My downloaded torrents never get moved - instead hard links are created into whichever path and naming scheme I defined for each consumer - this way, out of murdrrbot_07.mp3 a new author/series/booktitle.mp3 was created, both pointing to the same data and seeing it as a proper file.

But then there is one more thing: I suggest you split your thinking into data consumption and manipulation - because for the first, data duplication doesn’t matter. Especially for documents you’re talking about a ridiculous small amount of disk space and if it’s only reading/watching/hearing you as manager have no problem that data might exist multiple times.

If you want to keep it clean by design then you’re leaving the starter mode self holster - welcome to system design and infrastructure architecture! Here your approach could be to define lifecycles for each data type that you have. What a “data type” is in this context btw is a user term, NOT the underlying tech stack. You need to understand and document how an invoice should be treated and consumed by you differently than an invitation or a informal letter. Only then do you map file types, incoming channels, transformation steps, etc etc.

In my opinion: huge overkill to this upfront.

In short: spin everything up, observe how you use it and only then decide where things need to stay unique and cleaned up. Don’t break your head over something that’s actually quite easy to repair!

To get to the certificate with which you THEN can attack devices remotely. I.e. the attacker needs one device. And the skill to extract the certificate and the willingness to abuse it.

One of each and then the 613k devices in the tested region are exposed.