Wikipedia generally a really good candidate for generative AI.
I'm good.
no zuo no die
不作死就不會死 / 不作死就不会死 (bù zuōsǐ jiù bùhuì sǐ, “You will not get into trouble if you do not seek trouble”) or Chinese 不作不死. Basically the Chinese equivalent of "FAFO."
Pangolin.
Only complaint is that it uses Traefik instead of Caddy.
Do you have a proper backup solution? If you have a catastrophic data error, can you still recover? If not, just choose the hosted infrastructure.
Self-hosting is great. I love it. But when it comes to critical things that you absolutely cannot fuck up, I would rather trust a consumer based solution. If you fuck up your passwords and they're gone, it's going to hinder you significantly more than losing sleep about some rando having all your passwords if they break scrypt encryption.
https://lychee.electerious.com/
Super small. Lightweight. Web focused. Only downside is no multi-user access. Setup an account to share between your friends, and give them the login information. Then they can upload albums, edit albums, whatever. Anything uploaded is private unless shared, then anyone with the link can view the photos.
Seems like a decent fit for you. They're also working on multiple users.
It has its quirks. But personally I prioritize performance over just about anything else, so I tried it as a daily driver and I haven't found anything yet which would make me drop it. I especially like it in headless environments. All my VPS run it, and it runs critical infrastructure which I'm responsible for that monitors oil and gas extraction rates--so some pretty critical infrastructure.
Pretty rock solid.
I am working on routeing mail through tailscale to a relay, since my host, for whatever reason, blocks mail ports and charges to have them turned on.
Should work fine. Your provider can't stop you from opening ports unless its a shared environment and you don't have permission/the port is already in use. Generally what they do is just block connections via a router/firewall. So if you use a VPN you're sidestepping that issue. With the VPN in place, and the server online and running you should be able to connect via {VPN_IP}:995, etc.
IMO MiniITX are a real PITA to build for on a budget. Most of the smaller components are sold at a premium because of their size.
I sell these things for a living and its exceptionally difficult to compete with pre-built ITX boards. Generally, I have to get a really great deal to come out on top vs some of the prefab models.
Because of that, unless you need something very specific and can't find it elsewhere, I generally suggest that you do some research and find a nice prefab one for your needs. If you don't mind spending the extra $, then building them is a hell of a lot of fun because you can customize them and you get exactly what you want, nothing extra.
Replacing the mini-rack with a completely 3D printable version will pretty significantly curtail the cost (between 1-300 euro because mini-racks are fucking expensive), so it might really be worth it if you can. Everything else is pretty trivial. Only thing you'll have to make sure is you get a CPU and MB with enough PCIe lanes for you to expand to what you want. Specifically a PCIe X4 to 6 port SATA 3 host controller. The board only uses 4x lanes, but you'll have to ensure that all 4 lanes are available or you'll see reduced read/write speeds.
A reverse proxy like Caddy or Nginx is like a bouncer for your web services. It sits out front, deciding who gets in and where they're allowed to go. It's great for stuff you want to expose to the internet – like a website or web app – because it hides your actual servers, can handle HTTPS for you, and lets you set up some basic access rules.
A VPN is more like a secret underground tunnel between you and your server. Everything that goes through it is locked down to only members of the VPN. This is what you want when you're dealing with private stuff you don't want exposed to the open internet, like your home lab dashboard or some internal tools. The beauty of a VPN is that it works for everything--not just web traffic. SSH, file transfers, databases. All of it gets the same protection.
The federal judges could also send people to arrest Trump.
No, they cannot, because federal authorities won't prosecute a sitting US President. Only the House, by way of Impeachment, and the Senate, by way of conviction can anything be done about Trump now.
Additionally, SCOTUS gave the President total immunity when it comes to "official actions" which is not at all defined in any capacity, so the interpretation is up in the air. All's Trump has to do is argue that these are official actions and nothing can feasibly be done.
So he demands a sitting supreme court justice be arrested and they are. It goes to court and its found Trump can't do that. The judge is released, and nothing happens to Trump at all. So he tries again. And again. And again. Until he's finally successful.
Roe v. Wade was considered the law of the land and no one ever thought it could ever be overturned. Republicans tried for over 50 years to get it reversed which everyone agreed was a fools errand. And then they did... Just because something can't happen doesn't mean it really can't happen.
zstd is a significantly better option than anything else available unless you need something specific for a specific reason: https://github.com/facebook/zstd?tab=readme-ov-file#benchmarks
LZ4 is likely better than zstd, but it doesn't have wide usability yet.