mlg

I read the OP which is why I asked the question, not the entire thread just to figure out that you don’t want to use containers.

What about podman quadlets?

Dunno about immich, but photoprism also has a bunch of CUDA libs that would otherwise be a pain to maintain specific version sets on the host.

I don’t want to run a separate database or anything complex, so things like Immich or Photoprism are not an option.

Why not just use podman and let it handle itself? Unless you’re planning on hosting like maybe several million photos, I doubt you would ever need to manually set up a DB.

Just download the compose file, add your photo directory paths to it, and let it start and never think about it again until you feel like updating for some new feature months later.

If its internal network traffic only, you can just use stalwart and add the DNS records to your network so that stuff can use SMTP.

Otherwise, (also with stalwart or your preferred software), you will want to use an SMTP relay so that outgoing messages will be delivered without the hassle of getting your domain reputational enough for sent messages not getting junked by the big email providers.

I’m extra lazy and haven’t set this up, so I just have a public mail server that only receives messages because my outgoing SMTP port is blocked by my ISP.

Saw the title and I already knew IPv6 was still gonna be “not enough adoption” lol.

The overly aggressive lockdown from NAT is not entirely misplaced though. Windows is already notorious for default hosting an atrocious level of protocols that are anywhere between “I can get your NetNTLMv2 hash for free” to “gg ez RCE as SYSTEM user”.

Linux and Unix were also not magically protected either, like every FTP server implementation has had several RCE vulns and it was so bad that Linus himself pointed out how easy it was to abuse buffer overflow vulns even after the addition of NX mem protection with return to libc, several years before ASLR finally landed in Linux and Windows.

Seriously, the early 2000s was the wild west of vulns because everything was still written in C++ so you could just waltz into any binary, find some stack/heap overflow, and you’re on your way to an RCE.

NAT (and firewall) most definitely did prevent millions of users from getting rekt by a metric ton of malware that operated on the ability to connect to those services.

Image

RCEs, RCEs everywhere

But I mean at least everything has a small memory footprint instead of using 4Gb to load a god damn web page.

20 years of hoarding CVEs down the drain.

Now they’ll never be able to gg ez their way into any countey and will have to actually use their bribery budget to get more implants lol.

Yeah I might switch over too because immich didn’t originally have some of the sort and detection features like Photoprism.

Photoprism is pretty good but it doesn’t have some of the nicer UI features immich has.

Image

Photoprism users every time this topic comes up

Supersized Form Factor

If you want something that fits the SFF cube shape so you can throw it next to a TV or desk for video output, you can probably go for the SYS-A22GA-NBRT.

Easy to upgrade CPU & RAM later down the line if you start doing more stuff with it, plus space for dedicated GPU if you ever want to do heavy media server stuff.

Would avoid pi due to the underperformance for the price. Plus best bang for buck usable storage will always be HDDs. SD cards are nice but you have to disable journaling to keep the writes low as to not wear down usable blocks.

Thst branding reminds me of the extensive complaints of Anubis beeing too weaboo for production applications lol.

Is this even a real problem on steam or something some random dude wrote to his senator about?

My biggest issue was valve being slow to vac ban people bragging about cheating, which was almost exlcusive to TF2.

Seen way worse on reddit than steam for “hate” content.