Good choices. I too run Librewolf by default, with ungoogled Chromium standing by for the occassional asshat website intentionally designed to work exclusively on Chrome

this is the way

in my opinion, yes.

I run real-time full band rehearsals with jamulus.io for low latency audio, plus any video tool of your choice (with the audio muted). we use muted Jitsi Meet for the video feed, but it really doesn’t matter. it’s all about the Jamulus audio

Safeway. That’s only one of the several good reasons why I don’t shop there.

In the US I think the term you’re looking for is “republican”.

If you buy a new Pixel and then run an alt rom like graphene or lineage, you’re most likeley costing Google money. I believe they manufacture the Pixel at a small loss because they expect to make their money back harvesting and selling your personal data. Denying them that should mean you get decent hardware at a fair price, without really “supporting” Google as much as you fear. I could be wrong, but I’ve definitely seen that mentioned before.

🎶"Because I’m tacky…" 🎵

+1 for KeePassXC

I have seen more (client-owned) La Cie drives fail than I can remember. I wouldn’t touch their crap with a 10 foot cable. Their on-board hardware controllers are the worst, cheapest garbage I’ve encountered on the “name brand” market.

RFID-blocking leather wallet, keys, phone

For some reason, I don’t think the supreme court would agree with that figure.

If for personal access only, ZeroTier might solve your use case.

Thanks for your service! I’ve been trying out Thunder and I’m generally happy with it so far.

+1

In Ghostbusters 2 they rigged up a Nintendo joystick to drive the statue of liberty through the streets of NYC. Does that count?

You might try ZeroTier. You’ll each need a tiny client app, but its super easy to install and setup, and extremely secure. Free to use with up to 25 devices.

This answer isn’t getting enough upvotes

Yeah, they provide a “Flow” section where you can setup firewall-like rules to control your flow of traffic. You can configure rules that say, allow ssh to a specific server, but only from a specified devices, while allowing ssh, https and smb to another server from any device, blocking all other TCP traffic. UDP is a little weirder to control, but there’s a decent tutorial with example configs.

I hear about TailScale a lot, and I know its super popular in the self-hosting & linux communities. I haven’t used it myself though, so can’t offer a comparison vs ZeroTier. I found ZeroTier refreshjngly easy to use and install on client devices, so haven’t had reason to look elsewhere yet.

Anyway, have fun with your endeavor!

I just finished building a cloud solution leveraging an AWS EFS (elastic file system), a secure ZeroTier mesh, and a simple EC2 instance (vm) running Samba (or just sshfs/scp/sftp if multi-user file locking isn’t needed). EFS does have some pretty big limitations like the fact users can’t be in more than 16 groups (because it behaves like an NFS mount), and it lacks xattr and ACL support. Still, if you can work around these shortcomings you can build a very secure, surprisingly speedy cloud filesystem. Largest expense is the EFS, but after 30 days infrequently accessed files automatically move to slower storage, which is way cheaper. ZeroTier is an important piece of the puzzle, making your security and encryption a breeze. This allows you to run SMB over the internet without actually exposing any services. Connections are only made through your ZT mesh, which is highly secure.