I personally would be hesitant to host Immich publicly until they’ve done a security audit. The risk of accidentally exposing my photos publicly is too big for me.
That’s why I recommend using Tailscale or Wireguard directly. Personally I’m using Wireguard for me and Tailscale for other people I want to easily access my services.
Shares aren’t necessarily voting shares, but I don’t know how that works and if it’s even relevant for the private Valve corporation.
So maybe Gabe Newell does have full control over Valve, or he might not.
It’s definitely interesting that it’s only 25%.
Someone pedantic: It’s source-available, because it doesn’t grant the necessary freedoms to e.g. redistribute and modify the code.
Lego Star Wars: The Complete Saga was the first game I played. So great that I even bought it on disk, to buy it again on Steam.
In general LEGO games are fun and through collaboration with other IP’s, there’s so many different awesome games. Many of them quite cheap in sales.
The global IPv6 address is usually not directly reachable from the internet for incoming traffic. There’s still the router with a firewall which blocks all incoming connections, so having an IP for each device doesn’t make a difference for security.
With IPv6 ports still have to be forwarded on consumer routers by default, the main difference is that it doesn’t have to be translated to a different IP.
This also means I can have multiple hosts on my home network listening on the same ports, because their public IP’s are different.
Immich has breaking changes too often, so I disabled auto updates for the server and phone app. Updating every few months with backup beforehand is a good tradeoff for something as important as images.
Reading patch notes is especially important with some Immich releases requiring minor admin intervention, e.g. running an extract metadata job.
Iirc they also use BattleEye in addition to EAC, so depending on their implementation it might not be as simple (unless they put in some work).
Epic talks about anti-cheat on Linux not being good enough for them since they aren’t kernel level. Which might be fair since Fortnite is big, altough most people probably won’t change their OS while cheats are also available on Windows anyway. At the end of the day Fortnite is only one of many games which don’t support anti cheat on Linux for whatever reason.
Yes, but especially for 3D games this often leads to worse performance and bugs, since the developer still has to be able to test the build. The big reason proton is so great is that Valve is responsible for fixing games on proton, while the dev just has to support a single (Windows) build.
Obviously some devs also fix a bug only found with proton, but it’s something they optionally do, without taking responsibility for fixing all bugs.
If it was so simple for a game studio to release on all platforms, we’d have macOS x86 & macOS ARM builds too.
Iirc they did make changes to the engine, which would have required paying an external developer to port it again. It’s sad to see but the reality of native games without a Linux dev in-house.
What I’m more angry about is how they didn’t make the proton version default, instead they kept the useless offline Linux native port. I’ve read too many comments thinking Rocket League online doesn’t work on Linux.
Overwatch also doesn’t have a kernel-level/driver component. Since aim is only a relatively smaller part in Overwatch cheats aren’t as big of a problem compared to CS. At least it’s easier to counter a cheater by playing better (e.g. positioning, ability usage).
So you don’t play multiplayer titles? Almost every more or less competitive multiplayer game uses kernel-level EAC or BattleEye. At least on Linux they only run in userspace, if the dev allows it.
But I agree, no proprietary program gets root access on my system (except drivers, firmware and the like, I need a functional system).
I’ve added a keybind for deleting history, but it’d be great to have a way to specify short lived clipboard entries. But this might also be one of those standards that no one implements.
Wayland only keeps the clipboard until the application exits. This means a clipboard manager is basically a requirement. Iirc desktop environments might solve those issues by default, but on a standalone compositor just add a clipboard manager and enjoy the history.
Whether a device is wired or on wifi matters on some routers, because some routers have wifi and wired devices on different subnets by default. It’s unlikely, so I wouldn’t worry, unless you notice accessing it only works wired.
Iirc Plex supports transcoding for downloads, while Jellyfin only allows downloading the original file. But I’ve heard transcoding downloads is broken on Plex, so ymmv.
Intro skip is only available as a plugin on Jellyfin.
Also, Findroid has a better ui and supports downloads, while the official app has more features (ie. settings/admin panel).
Or simply set up wireguard.
At least I suffered from terrible battery life with Tailscale, while 24/7 wireguard isn’t even showing on the battery stats.
Wireguard is awesome and doesn’t even show up on the battery usage statistics of my phone.
With such a small attack surface I don’t have to worry about zero days for vaultwarden and immich.
Linux phones aren’t supported because it’s an Xorg feature. Usually Linux phones use Wayland for the better (touch) experience. If someone wanted to they could implement it on a Wayland compositor, but given that no other OS I know of supports diagonal mode, I wouldn’t hold my breath.
The DNS-01 challenge [1] allows for issuing SSL certificates without a publicly routable IP address. It needs API support from your DNS provider to automate it, but e.g. lego [2] supports many services.
I personally leave my Wireguard VPN always on, but as its only routing the local subnet with my services, it doesn’t even appear in my battery statistics.
[1] https://letsencrypt.org/docs/challenge-types/#dns-01-challenge
Immich recently changed license from MIT to AGPL. As far as I understand they can’t sinply relicense to a non-free license unless they redo a good chunk of code from the last half a year.
If they still used the MIT license I’d be worried too.