WG is not meant to be a stealthy protocol and is easy to detect at the ISP level. It has distinct characteristics that packet inspection tools can use to identify it by examining the traffic and block or flag it. Blocking it completely is trivial for any ISP, much less a nation.

There are modified versions like AmneziaWG that make it stealthier, or alternative protocols built to evade traffic inspection like xray or sing-box (these two are really more like protocol frameworks that have multiple protocols you can use). It’s a bit of an arms race for packet inspection tools to be able to reliably identify these intentionally stealthy protocols, but the advantage is generally in your favor as long as you are using your own servers and not public VPNs. Though even then you need to take care to camouflage your traffic to be truly safe, like if you are shoving all of your traffic through one remote server that has approximately the same amount of traffic going out immediately etc that is something that can also be identified.

How much precaution is actually warranted depends on where you are and what the potential consequences are. You don’t have to go to a full tinfoil hat paranoia level setup to avoid most blocking.

Sing-box is a VPN tool built to evade censorship https://github.com/SagerNet/sing-box . It is extremely resilient and stealthy.

See also, xray and v2ray, which are similar, but in my experience sing-box is a bit better documented (at least in English) and has better maintained client apps.

Setting any of these up can be complicated, but LLMs can get you pretty far if you have safe access.

My partner eats muffins from the top down. Sometimes, I’ve caught her just eating the tops off the muffins and leaving the bottoms.

Its named after the Esperanto word, but the intended pronunciation is for-JAY-oh.

https://forgejo.dev/forgejo.dev/forgejo

Official pronunciation audio: https://forgejo.org/static/forgejo.mp4

Is that a hot take? I see a lot of people saying this, including myself. Kubernetes solves problems at work, but is way overkill even for my moderately elaborate home setup that would cause more troubles than it solves. If people want to use k8s at home go ahead, but I don’t.

I agree that there is some value to obscurity generally, but Wireguard already evades port scans and fingerprinting. Unless a packet is signed with a known key, it gives no response to traffic, so scanners and fingerprinters see a closed port. You ISP can identify WG traffic while you are connected by inspecting your traffic, but random scanners won’t see anything. Look on shodan, you won’t see Wireguard.

I ended up building it myself, which may be the best option if you want to use other plugins. I have it set up in my own Forgejo with a CI configuration to auto build the binary and docker image. Forgejo let’s you also host container images, so I can just pull from the latest build wherever I need it.

Both those tools analyze service logs for suspicious activity and block based on patterns. If you aren’t hosting anything externally, they probably aren’t doing anything.

Crowdsec is probably more effective than fail2ban overall, but both are only part of a defense in depth strategy and are really last resort protection.

I like it a lot more UI wise. It feels like the modern MS Office if the ribbon UI wasn’t awful and busy. Compatibility is extremely good as well. Has Nextcloud/standalone web version, desktop versions, phone versions. I haven’t used the phone app that much, but it seems good from what I have used.

Edit: I don’t know how well it handles Markdown, however.

OnlyOffice?

I liked ddg browser and used it for a while, though I had to go back to Firefox for an unrelated reason (couldn’t get ddg browser to accept my private certificate authority as valid).

Tugtainer is pretty nice, and has a webui.

Previous 3 major release upgrades I’ve done were smooth, ymmv

If your purpose is long term archival you should probably be using M-Disc Blu-rays anyway, which are still actively made by Verbatim (and one other company).

Not entirely sure about the de-google’d version of the Home Assistant companion app, but I know the regular companion app uses Firebase (and whatever the Apple equivalent is called, I forget) to deliver notifications, and it still would using Telegram as Telegram also uses Firebase. Apprise is a bit different as it can use multiple backends. Regardless, there are multiple ways to do things. Ntfy iphone and google app do not route your data through a third party server. I self host the ntfy server on my own machine and domain and my phone connects to it and receives data. It will deliver notifications wherever I am, not just in my LAN. It also provides a nice UI akin to Pushbullet I can use to send myself stuff privately.

You can’t replicate all of what ntfy does with Home Assistant. There’s more to it than just delivering notifications, it’s the whole app frontend and persistent data etc. If it’s not clear to you what it’s for from my description you might have to go look into it yourself. Look at PushBullet, that’s most similar to what I primarily use it for.

Home Assistant notifications and almost all other notification services on phones actually route notifications through a cloud service like Firebase because Apple and Google try to railroad apps into their platforms. Ntfy lets you actually self host notifications without a third party, but also without killing your battery.

That’s not the main thing I care about, though. Mainly I use it as a self hosted replacement for PushBullet, to share links and files with myself across machines and do some light alerting for servers and stuff (e.g. TrueNAS errors). Some of that could he done with HA, but ntfy is just better for some other uses with stuff like its web ui.

Plus, apart from that ntfy is really easy to integrate with other stuff, like its easy to send a notification from a shell script or web hook so you can hack it into things that don’t otherwise support notifications (there are also lots of things that support ntfy natively, e.g. the arrs).

Actually Budget for finances, Nextcloud for everything office and organization, Home Assistant for home automation, paperless–ngx for storing and sorting documents, freshrss for news, ntfy.sh for notifications.

Assuming you mean Android, FYI syncthing for android is discontinued, so you might want to look into other options.

https://github.com/syncthing/syncthing-android?tab=readme-ov-file#discontinued

I don’t think immich supports this natively but you could mount an S3 store with s3fs-fuse and put the library on there without much trouble. Or many other options like webdav.

I really like Zoraxy. Similar to NPM but it’s its own thing and I like it a lot more

I know how to use raw nginx/Caddy/traefik to do it, but I find the WebUI and all the extra features Zoraxy has to be very convenient and easy to use.