You could also route any calls to /api through authentication. However I am not sure if that can cause any problems. Is there a list of endpoints that need to be reachable for federation to work?

Never noticed anything in the last couple of weeks. I had one podcast missing new episodes because the schedule was turned off. But I might not have had it turned on in the first place.

ntfy and FreshRSS for me. Audiobookshelf recently joined and I am using it daily. (Inofficial probably the Arr stack though 😅)

They do allow to reply, simplelogin also has no limitation on reply count.

If it is just for email forwarding maybe a service like https://anonaddy.com/ or https://simplelogin.io would work. Catch-all is even included in the anonaddy free plan as that is something you actually do not want to have enabled 😄 For your custom domain you have to have the lite plan at least though.

After jumping between duplicati, duplicacy, borg backup, kopia I finally settled on Restic a couple of weeks ago.

Using it with resticprofile (https://github.com/creativeprojects/resticprofile) on Linux and Windows which does all the heavy lifting converting the setup from a simple configuration file to restic commands and adding a few options like calling webhooks on specific conditions etc. It is running rock stable so far.

https://creativeprojects.github.io/resticprofile/configuration/getting_started/index.html

I would recommend homepage. Configuration is done via config files.

They have started implementing read-only folders for Immich with the latest release. And it does actually work pretty well.

However it currently is a very manual process via the command line (and not very well documented, especially for docker) and it has limited features as it does not automatically sync new images and does not remove deleted images from its database yet.