It’s because people get mislead by the “agent”, assuming there’s something actually intelligent at the other end, able to act like they would, just… Automated.

What a clown. In what world do you require an LLM to check for duplicate pictures??

I mean, good on him for realizing that LLMs are dogshit. But still.

If all jobs were lost if rich people disappeared, then jobs aren’t really necessary.

If jobs are necessary self-evidently, they do not require rich people to exist or get done.

I mean… Depends on your threat model. Hetzner is a very reputable German hoster. The only way someone is going to try and read and puzzle together memory dumps is if you’re under investigation for something seriously heinous.

Shutting the VPS down also solves this.

But really, this is a general problem with every “someone else’s computer” solution.

E2EE still nice though, wish Immich had it.

LUKS isn’t cumbersome, you should really enable it on nearly every Linux system.

Anyways, what do you mean “allowed”?

I have a Hetzner root server set up this way btw, have to ssh in to decrypt the zfs pool before boot.

Do note though, this does not protect from an attacker with physical access reading memory.

Bullet I assume

Shouldn’t it be the other way round? If I’m a guest at someones house, IMO I should go out of my way to do as the host does.

/s

How! For me it’s more like: “you get up to cook dinner and realize you’ve already snacked twice your calorie budget”

Recently, when we don’t feel like cooking after work, we’ve been making mashed potatoes (the pre-packaged, powder kind, because it’s WAY less work and surprisingly good), and then topping it with a big spoon of Laoganma, specifically the Crispy Chilly in Oil. Takes less than 5 minutes from geting the pot to sitting down to eat.

If you’re feeling extra fancy, fry an egg to put on top.

Yeah, and Steins;Gate 0 rated higher than the original… What?

Hm… Maybe? Only one way to find out!

(I know this is in reference to Sousou no Frieren, but just in case: that’s not an actual German name, it’s just a German verb. Never even seen it used as a name.)

Eh… Not really. Qemu does a really good job with VM virtualizarion.

I believe I could easily build containers instead of VMs from the nix config, but I actually do like having a full VM: since it’s running a full OS instead of an app, all the usual nix tooling just works on it.

Also: In my day job, I actually have to deal quite a bit with containers (and kubernetes), and I just… don’t like it.

I’ll DM you… Not sire I want to link those two accounts publicly 😄

Zero.

About 35 NixOS VMs though, each running either a single service (e.g. Paperless) or a suite (Sonarr and so on plus NZBGet, VPN,…).

There’s additionally a couple of client VMs. All of those distribute over 3 Proxmox hosts accessing the same iSCSI target for VM storage.

SSL and WireGuard are terminated at a physical firewall box running OpnSense, so with very few exceptions, the VMs do not handle any complicated network setup.

A lot of those VMs have zero state, those that do have backup of just that state automated to the NAS (simply via rsync) and from there everything is backed up again through borg to an external storage box.

In the stateless case, deploying a new VM is a single command; in the stateful case, same command, wait for it to come up, SSH in (keys are part of the VM images), run restore-<whatever>.

On an average day, I spend 0 minutes managing the homelab.

Use a large spoon instead, won’t bend.

Interesting, that sounds more related to personal phone calls?

I was more thinking of the “single-purpose” kind of call, where you can communicate very clearly about your intetions

You (sadly) need to group all quality profiles into a single one, and then handle quality through a custom format. Example from my setup:

NixOS for the win! Define your system and services, run a single command, get a reproducible, Proxmox-compatible VM out of it. Nixpkgs has basically every service you’d ever want to selfhost.