Lucy :3

Everything runs through fully hardened/restricted systemd units, as separate user with minimal access rights for everything

You’d need to escape the software, restrictions and get root to do anything meaningful, while avoiding detection

25GB=qemu@verein.service
17GB=auto-aur-builder.service
15GB=borgmatic.service
11GB=postgresql.service
6.2GB=qemu@arturimages.service
5.5GB=gitlab-puma.service
3.0GB=immich-server.service
2.7GB=cryptpad.service
2.3GB=immich-machine-learning.service
1.4GB=clamav-daemon.service
1.3GB=gitlab-sidekiq.service
1.3GB=gitlab-gitaly.service
1.3GB=systemd-journald.service
1.2GB=lemmy.service
1.1GB=peertube.service
1.1GB=docker.service

So pretty much, a tiny 11 VM and an autobuilding service, that probably has a memory leak. Then backups, permanently running, postgres containing all my data, and a linux vm. Then, various services.

The only component actually fucking up boot has been the NVidia driver. Otherwise, Arch with testing repos has never failed me for years on many devices.

If you want to have at least some thrill, use testing repos. I had to fix GitLab two (2) times due to the main package not being linked against testing libraries (it took 10 seconds to ln -s the new to the old version), and had one breakage due to dovecot revamping their whole config system, but publishing no example/useful docs.

Fave: vim
First: notepad.exe
Future: vim
Honorable mention: vi
Loathed: Everything but (neo)?vim?
Current: vim
Longest: vim

Never got a reponse so I just apply a workaround everyday

I hate it. I just want vanilla sway; and i want everything else to look like it too.

Afaik immich is generally safe to publicly expose. Otherwise, I’d just use http basic auth. Supported by every server and client, should be secure enough to hold off attacks in case immich’s login/auth mechanisms fail, and I don’t see a usecase where this wouldn’t work.

If you don’t have a public IP or need IPv4, get a 4€/Month VPS (cheaper than even a Pi’s energy usage I suppose) and put headscale on it.

Isn’t this ‘sharing an album’?

It’s obvious spam… I’d assume they’re deleted and banned asap, are they not?

When someone has multiple Clankers (“AI Agents”), you can synchronize/verify their so called “reasoning” or “thought process” (which is a total scam btw).

Nothing someone with a brain wants.

The most unsafe factor of the AUR is aur helpers and their goal to dumb everything down and streamline the process as if the AUR where an official repo

By misusing the AUR and ignoring every warning telling you to read and understand the pkgbuild or don’t do it.

The hardest thing is reputability. Which is solved by getting a good IPv4 provider.

Why can’t they just fuck?

VLC and Blender are not really alternatives tho, rather industry standard

Potentially, searxng is running as vassal of uwsgi@emporer

IP/Name: 30p87.de
Key: YfXqz85PRidZ0NwMj3SAkFk5wypJPofTInbae9+mb1I=

All default setting, relay and server, free version.

Asked my ISP for a public IP, exposed all things that can handle that to the public. Custom Wireguard server for VPN