Can you not just setup an nginx reverse proxy at the network edge to handle the ssl for the domain(s) and not have to worry about the app itself being setup for it? That’s how I’ve always managed all software personal or professional

No but there is a semi work around.

When using the app if you select all images one of your options will be delete from device when you click on that it will say hey some of these might not be backed up and one of your option is to only delete the things that have been backed up. It’s not automatic but it is a way you can kind of just Mass do it to everything

In its default state i think thats fair. Example docker bypasses most firewalls as it runs before iptables rules process. So if you don’t either use 127.0.0.1:port:port (many compose files offered by projects do not do this) or add specialized iptables rules to fix that up you can end up directly exposing services with meaning to or even realizing.

And yeah privilege escalation etc. There are solutions like what you mentioned but it can be a lot of work to set all that up so most people won’t

There is literally a thread somewhere on my Lemmy I need to try and find just recently that shows this perfectly. Someone made a thread asking how they can self host their images for backup from their phone and naturally everyone pointed them to immich. And they immediately started complaining and bitching that they could not access it from outside their local network. Instead of asking how to fix that they were like what the hell is the point if I have to be on the same Wi-Fi this is stupid. And they basically did not want to engage with the people being like hey you need to either make a reverse proxy or open a port on your router. They should not be self hosting

You need to open a port on your router for it to be accessible from the outside world (example your phone on LTE or a different wifi) , this is not a limitation of the software but a security feature of your router

To be fair until very recently immich would have been a horrible recommendation for someone that is completely new to self hosting because almost every other update was a breaking change that required you to carefully read before updating.

And even if you tried if your installation was old enough eventually your compose file would Drift Away from what main line was and you basically had to seek the help of the developers to fix it up.

It only just recently released what is supposed to be the stable line that should hopefully no longer need these large breaking changes

Meanwhile my costco milk seems to want to last a week+ past the date making me suspiciously sniff and sip it every time after the date

It’s not like it can’t happen, i also found porn very early on. I got addicted and it ruined my early sex life. Real women weren’t “exciting” anymore and I’d lost my sensitivity as well.

This is NOT the solution but it’s also not not an issue

!Ah, general kenobi!<

I think the missing key there is the independent statically built binary for apt that does not depend on pretty much any part of the base system actually functioning. That’s what I couldn’t find, is there one and I just suck at Google?

pacman is the best and I’ll stubbornly refuse to entertain any other opinion. It’s in my experience the least likely to just randomly rip the system to shreds. I don’t know if it has more through prechecks or what bit I’ve had debian and Fedora (apt and dnf) rip the system asunder trying to jump multiple major versions in an update of a system that hadn’t been online in a long time.

I don’t care if jumping multiple releases at once “isn’t supported” it shouldn’t be that frail and arch will happily update something many years behind as long as you update the keyring.

Even in the event your system somehow does get hosed you can fix almost everything by just chrooting in, grabbing the static pacman binary, and running “pacman -Qqn | pacman -S -” I’ve recovered systems that had the entire /bin wiped (lol oops moment with a script) and as far as i know apt and dnf have no equivalent easy redo all.

I’ll poke around, it’s an elegoo resin and if I’m not mistaken they at least offer some recommended setting changes somewhere on the website for their resins

That’s a fair point, the date on the bottle says it should be good for another year apparently but it wouldn’t hurt to get a fresh bottle just to be safe. It does look like I would need to fuck with the exposure time regardless since it’s a bright white resin it appears to need longer exposure. I also have a clear resin which apparently needs even more exposure.

At the very least I know I have good build plate adhesion because God damn some of these have been difficult to get off I actually slightly scratched my build plate in one spot a little bit getting some of them off I need to be more careful and use the plastic spatula not the metal one

I used the default provided, but that’s a good guess I’ll give it a little extra distance and maybe add a little extra wait time after retraction to see if that helps

The resin was from when I bought the printer. was shaken, and poured in with the included filter funnel, it didn’t seem to be having any issues mixing, tho it is an “abs like” white resin so maybe i need higher exposure time? I’ll check the elegoo site it’s one of their resins i know some of them have setting recommendations.

Thanks for the link I’ll give cone of calibration a try and see where i can get with that

Already mentioned and ruled out unfortunately, unless you can find some documentation we couldn’t

None of the features i need exist in the community edition unfortunately. https://h-mdm.com/headwind-mdm-version-comparison/

Which seems to be a common thread with the “open source” mdms. Over half the actual useful mdm features are not available for the self hosted version

In what way? Why does management of tablets inherently require paying a third party to run the software

One of the documentation is mostly useless ones. Maybe I’m blind but i searched for 5min to try and find any instructions at all for their official docker image and found nothing. Seems they only want you using the cloud now even if you self host as i can only find aws or render documentation, there is also kubernetes but I do not have a kubernetes setup nor do I want one for just this single application.

Guess i can try to muck through the docker without instructions and hope it’s simple enough without any gotcha steps.

Personally what I do and what I would recommend is putting the reverse proxy on the VPS and having it reach out to the services over the VPN, rather than for security this is for performance reasons. Caddy and nginx reverse proxies can both be setup to cache static content. This helps remove the delay of reaching out over the vpn for some things and in my experience made a noticeable performance difference in services that had cachable content.