If zstd is available, it is a lot more efficient and performant over gzip.

What happens if the NAS dies though? What does recovery look like?

Is it possible to recover the data from the drives without Synology’s OS? If so what is that process and how difficult is it to do correctly?

I know that with ZFS, recovery is independent of vendor OS and/or hardware, so if the hardware dies you can just throw the drives into any COTS system with enough ports, but I’m genuinely unsure if that is the case for Synology or not.

ZFS, btrfs, and other software RAID solutions can use mixed drives w/o much issue as long as you make sure that the capacities match or that you set the array up with the smallest disk size in mind.

Do not use hardware raid controllers. They provide no meaningful performance benefit over software raid and make data recovery much more difficultm(if not impossible) in the event of hardware failure.

https://git.mlaga97.space/mlaga97/persistent-live-docker-flake has a builder for a live disk that will mount /dev/sda as ext4 to /persistent, and then start up dockge and whatever containers are present from the previous boot automagically.

OCI as in Open Container Initiative.

I’ve done something extremely similar with a custom NixOS iso for my docker VMs to make versioning and backups easier (golden image live disk with SSH+Docker+Dockge shared between all VMs + local persistent storage specific to each VM).

You can configure frigate via OCI container with custom config, as well as NFS mounts, SSH server, etc and then have a read-only live disk that boots up, mounts NFS share, and then starts up frigate.

you might have another 9+ months before you can’t boy-mode anymore

This is pretty much exactly what I did, started HRT, let it cook for about 8 months, and them was able to transition socially in a much more ‘flip the switch kind of way’.

Most of my dysphoria was hormonal though, I did not like the way T made me feel at all. The social aspect was less immediately urgent for me personally, but that may not be true for everyone.

Bonus info: Calvin Klein sells a no-show sports bra that does a very good job of hiding breast development for a while under even a fitted T-shirt. It has enough padding to hide pokies and protect from bumping against stuff early on, saving a lot of pain and trouble.

I use a Philips Norelco 2000-series electric foil shaver for face, chest, forearms, calves, and tummy, which combined is like 80% of my shaving activities. It works really well for me in those broad and relatively taut-skin areas, but very poorly on insides of joints like armpit where it tends to pinch. Blades last forever and it is quickly more cost effective over disposable or cartridge razors and is also quick easy, and causes a lot less razor burn for face shaving for me than anything else.

For the rest I use a mix of cheap disposable 2-blade razors on areas where I really want a new clean blade every time for hygiene purposes and a multiblade cartridge/“cartridge razor”. I was using the gillette proglide 5-blade cartridges which work well but cost a lot, but eventually got a 3-blade leaf razor (safety razor in the form factor of a cartridge razor) which I have liked tremendously for thighs, armpits, and other areas the foikd shaver doesn’t work well for.

looking to eventually drop it for Dendrite

https://github.com/matrix-org/dendrite/issues/3413

“What is your favorite self-hosted application?” had what looks to be about 15 matrix responses.

Would potentially be interesting to see Matrix/XMPP/etc prevalence in future surveys, maybe replacing ‘what activitypub apps’ with a more generic ‘what federated apps do you self-host’

I think shared hosting there is more meant to refer to the older “upload your files in webmin and we’ll shove them in /cgi-bin/ with everybody else’s”-style hosting where multiple users sites are running on a single instance of a webserver versus a VPS giving you a VM with SSH access?

Where the metadata goes I think is important as well.

All Signal metadata necessarily goes through Signal’s servers and is tied to your phone number, but not all Matrix metadata ever gets near the Matrix.org if you are using a different homeserver.

I think both are less than ideal in that regard, and I think Briar (strictly P2P) has a much better model for dealing with this at the expense of generally being a UX disaster.

The server software appears to be available and updated now, which they’ve been spotty about in the past. I’ve updated to remove the closed-source part since that is not correct.

As for phone number: Signal still requires me to enter a phone number to create an account as of about 5 minutes ago.

Signal is centralized, closed-source, not-selfhostable (edit: in any meaningful way) and requires being attached to a phone number. (Edit: server source is available, but self-hosting requires recompiling and distributing a custom app to all of your contacts to actually use it.)

Matrix is decentralized, federated, fully open source with multiple client and server implementations, self-hostable, and does not require being attached to a phone number.

What part were you getting hung up on?

If you are dead set on a specifically certificate-backed access control scheme, a VPN with the ability to use the hardware-backed certificate store (such as OpenVPN) is likely easier to set up as it is better supported on mobile devices and doesn’t require application-level support (i.e. everything is protected, not just the apps w/ mTLS support)

https://openvpn.net/faq/how-do-i-use-a-client-certificate-and-private-key-from-the-android-keychain/

I do find rclone to be a bit more comprehensible for that purpose, rsync always makes me feel like I’m in https://xkcd.com/1168/

Must have an android client,support mtls,support attachments and card layout.

ps: pls don’t suggest to save to local storage and sync that.

pls don’t suggest this app that cant do that but its great.

Anyways anyone aware of any app that can do that?

Nope, you seem to be well aware of the options available to you and there isn’t any one single app that meets all of your requirements, so unfortunately we can’t recommend anything at all to you, per your specific request.

You’ll have to build it yourself either from scratch or by taking one of the existing open-source tools and adding the missing functionality.

Looking forward to your pull requests!

Restic and borg are both sorta considered ‘standard’ for doing incremental backups beyond filesystem snapshotting.

I use restic and it automatically handles stuff like snapshotting, compression, deduplication, and encryption for you.

DigitalOcean and Vultr are options that “just work” and have reasonable options available in $5-6/month category.

DO is more established and I’ve used them for nearly 10 years now for a $6/mo VPS and for managing DNS for my domains. Vultr has some much closer datacenter options if you happen to be in the southeast US, rather than basically just covering California and NYC like DO does.

Given how common it is for people to use the ‘reset password’ link for this exact purpose, it does make it seem kinda redundant to even implement passwords on many services to begin with.