my opinion about nym VPN for now is… it’s not very stable, and it was very unstable up until recently

before two things were very very annoying that tree me off, first is the connection was getting stuck after exactly one hour saying that everything is connected when it wasn’t, and the second issue is partly of too many reconnects was that my *tb allowance was exhausted after 60gb which happened many months in a row

there are not as many nodes for the same country as I would like to have, and many nodes have not really good health (like websites ask for captcha or don’t let you in)

on the other hand, if without tax and paying for two years with crypto, you can get it very very very cheap

and nym promised to be very secure and etc, and with more development the whole experience will get better

pho ga inspired mien ga tay 😅 (or… it seems like your noodles have pho shape, but not sure if it’s like pho, so it coulb be not mien)

like the meaning of the dishes in Vietnamese is just a list of ingredients. so mien is the glass noodles, and ga tay seems to be the turkey

there is a real common pho ga tay in Vietnam, and also there is mien vit/ga and optionally tron (like mien vit tron)

In case you want to share you data for them to sell, so not 100% functional

Forgejo (gitea) seem to be implementing federation into git

I’m actually not from the “close everything, don’t open ports, always sit behind cloudflare” camp

We selfhost so we can use and share our services

There are other things we can practice instead of just isolationism and keeping everything as simple as possible

There are many ways to do many things in nixos

For updates you can do automatic updates

Also, there are many deployment tools, like deploy-rs, morph, colmena, bento. They all have different approaches. Some you use ssh to deploy a remote system. Some just fetch the configuration and autodeploy it.

There are many ways how you can play with this. So you can disable sudo, and deploy with ssh only from some or a specified ip. Or you can keep ssh for root disabled and just deploy home-manager. It’s really a lot, you imagination is the only limit

P.s. or you can just generate an image from a trusted machine, and flash it onto the device you want, unlimited number of ways

I’m a Nixos user, I wouldn’t be much help unless you do Nixos. But it’s a whole new rabbit hole which would take you months/years to learn and setup 😅

What I can say, you can do “access from home network”, “access from VPN network”, “1fa/2fa from the internet” OR “access for / and /api, but 1fa/2fa for stuff like /admin, /admin-settings, or just /login or /logged-in”

Fail2ban is fun, also maybe have a look at crowdsec

Tailscale’s android client should be foss

Wireguard is foss

Outline is foss damn, it’s nodr vpn

So, some of the apps from the screenshot are legit

Notifications on system file access

Notifications on root login/sudo

Declarative OS, tmpfs root, disabled sudo

Bastion server, but right now I don’t have a proper router to do it at home

Yubikey, or a separate phone on Graphene OS for otp, keys, etc

Authelia + fascist fail2ban (or some CSF)

Most of these are pretty normal, but usually you don’t do them all at once 😄 also, I don’t really like hiding my services from the open internet, authelia is fine tuned to let people only access what they are supposed to. And regular users of my server usually don’t notice that I even have it

But you still need a PC? 🥺

Why? 🥺 you can just do wireless adb to the same device, and open the shell in termux 🫣

Even better with wireless debugging and some app manager or shizuku

You still should set two dns servers… Two piholes/adguards

That’s why you usually have two piholes, or adguard homes

And can even synchronize them

Nixos, brothers and sisters, show yourself 🥸

For me it sounds more like: i like these features, what your option can offer, let’s discuss

I mean, other commenters can read the post, they can see other options, but they all just flood “Firefox”, with no explanation or comparison, etc

To a very lazy and uninformative message, there a very lazy and uninformative reply

Probably not, firefox has many users anyway 😄

Somewhere in the website settings, or under the https lock icon

I really don’t understand why you got downvoted, you’re having like 30 conversations at the same time, no problem to copy of of your answers to save some writing formulating time

In some recent versions of librewolf whitelisting of clearing cookies/history was added