Yeah thats correct !

I Wouldn’t say heavy though (maybe I see it that way because I got a bit better with bash and the like :p) because you can make use of CRL to revoke your certificates and renew them very easily with your intermediate and ready to use config files.

But yeah, there isn’t any automated way to manage certificates like Smallstep does :)

Window XP was probably the best and last good Windows version… 10 was kinda okay without all the telemetry shit and bloatware.

Windows 11 feels like macOS with extra steps + spyware on every move, click, clipboard copylpast… Wouldn’t go near that stuff even with full protection and debloat ^^ Just remove that shit and install linux instead.

Or simply create your rootCA, IntermediateCA, keys and certifictes with openSSL.

Neither of those are begginer friendly but openSSL is probably a bit easier to get started. There’s a nice book with openSSL (if you are interested I migh look how it’s called) and the last chapter is all about how to create your mini-CA and everthing else to serve your proxy with valid certificates for your homelab.

Or people who uses it as a mini server and SSH into it while lid is closed 😎

Them probably uses a special plugin device in the outlet.

I have this bash script you can use and have a general overview but I’m not totally sure if I fully understand it and if it’s the whole system’s wattage or only the CPU 🤷‍♂️

#! bash
time=5
sum_1=$(cat /sys/class/powercap/*/energy_uj | awk 'BEGIN { sum = 0; } { sum += $1; } END { print sum; }' "$@");
echo "before" $sum_1
sleep $time;
sum_2=$(cat /sys/class/powercap/*/energy_uj | awk 'BEGIN { sum = 0; } { sum += $1; } END { print sum; }' "$@");
echo "after" $sum_2

sum_1f=$(printf "%.0f" $sum_1)
sum_2f=$(printf "%.0f" $sum_2)

final_sum=$(echo "(($sum_2f - $sum_1f) / 1000000) / $time" | bc -l)
#echo $final_sum | bc -l | xargs printf "%.2f\n"

formated=$(echo $final_sum | bc -l | xargs printf "%.2f\n")
echo $formated "w"

Haha ! Good to keep your brain cells functioning 👍

Wow ! I will still try mealie /Tandoor for family purpose and ease of use. If it doesn’t work as expected, I will totally try this out !!

One question if you don’t mind,

servings Indicates how many people the recipe is for. Used for scaling quantities. Leading number is used for scaling, anything else is ignored but shown as units.

Does this function work well? I didn’t saw any examples so maybe you could tell me :)

Thanks !

plocate is backwards-compatible with mlocate, and is much faster and more efficient than mlocate. source

From your personal experience, what do you prefer and why, if you don’t mind :).

Fair point ! Yeah sure if you host a blog online it doesn’t make sense… But if you only self-host your services for family and some friends and access them over VPN, a local CA is actually a privacy respecting choice.

Hosting something on the web (specially self-hosted) without the propre software and hardware is a bad idea in the first place anyway !

I also believe it’s possible to set up HTTPS encryption without a domain name, but it might result in that “we can’t verify the authenticity of this website” warning in web browsers due to using a self-signed certificate.

Just create your own rootCA and IntermediateCA and sign your certificate with those, put the CA in your trust store of your system and get rid of this self-signed warning on every device and happily access all your service via: *.home.lab or whater ever local domain pleases you.

In addition to that, without a secure connection you’re stuck with HTTP/1.1

That’s not entirely true. A lot of requests, even with https, are send over HTTP/1.1. And this is kinda mind blowing that in 2025 we still rely on something so old and insecure…

Same goes with SMS and the old SS7 protocol from 1970… 2FA SMS is probably the most insecure way to get access to your bank account or what ever service promotes 2FA sms login.

A blocky road ahead of you ! It will take some time, don’t try to speed up the process ! Remember the first time you started Windows on a computer ? It wasn’t easy at all ^^’ but now most people know how to start and use a Windows system.

Linux is great, linux is freedom and customization but linux is also a hell of another level of complexity.

It really takes 5min tops ! But only if you know what you are doing. Immich is not an easy compose stack for beginners. There’s also all the other stuff you have to take care off (backup? Behind proxy? Share with people outside your lan? …).

Having the compose stack up and running is just the first step ^^ but once you get the hang off, it’s fun and really cool stuff floating arround (navidrome, pihole, home assistant, newpipe, vaultwarden, jellyfin…)

It takes some time to get comfortable but don’t give up, it’s worth it !

I read that somewhere from a github repository maybe even in Navidrome’s pull requests or Issues maybe?

I think the argument was that in directory structure you always have to think where you have to put your files and sometimes a file can be at 2 different places at the same time and I do agree to some degree, that’s why I use both :) !

Yeah… Newer genration are into “put everything in 1 big messed up directory and find all you needs by tags” structure.

I get the gist, but calling directory structure evil is kinda extreme. It allows to structure your thoughts and if somehow your metadata is corrupted, you still have a directory structure.

I work on both front for compatibility issues but nothing beats a well thought directory structure!!

What application do you use on your phone to mount samba shares (Android)? I know Amaze can mount those but they are not easily accessible by other applications.

Not sure this is what you are looking for but navidrome has smart playlists, which is a small configuration file you can add to your navidrome and will automagically create a playlist in your navidrome based on your config.

Can’t exectly remember how or where but I had some chmod 777 -R going on on my setup on the wrong directory and everything seemed fucked up !

Was easier to fresh install instead of hunting some permission issue… Learned from that experience and still learning something new with perms on Linux !

Was going to say the same ! Such a cutsy nice little mini-rack/server setup !

Still fighting my spaghetti setup with cables sprouting everywhere.

but you’ll lose the ability to mount them on Windows if you do that.

One viable solution to that, is to mount that drive as SMB share, best of the two worlds !