walden

A while ago I made my first attempt at setting up a SSO for some of the things I host. I figured out things that have built in support, like Immich, but struggled with getting it done through Proxy for things that don’t have baked in OAuth or OIDC support.

I revisited it yesterday and figured everything out so I’m happy about that. Navidrome was one of the more difficult ones to figure out because I need SSO authentication for the web-ui, but username/password for the API. That was actually pretty easy once I wrapped my head around it.

I picked Authentik based on general positive things I’ve heard about it, and I use Nginx Proxy Manager for reverse proxy.

I use Backblaze B2 for off-site backup.

I recently starting using Proxmox Backup Server to back up my virtual machines.

I have Restic scheduled to back up the PBS folder, photos, etc. multiple times per week. My restic script excludes large replaceable things like video files.

Backblaze announced recently that they’re switching to everything being encrypted on their end. It’s already encrypted coming from my server, but I guess it’ll be double encrypted? The only caveat is it only applies to new objects, so I plan on making a new bucket and starting my backup from scratch.

I, for one, value my family photos more than a replaceable, insured box made of wood with electrical wires running all over the place.

That would take a very long time.

I have a Prusa and it’s my first 3D printer. It doesn’t seem beta to me at all. I have yet to have a failed print.

Anecdotal, of course. Just saying.