On my machine it’s consuming about 0.5% - 1.0% of cpu time, which is higher than zerotier in the same machine (almost zero).
Tailscale does a lot more things than just tunneling though. For example, on default installation it’ll catch all outbound dns request on the machine and route them through MagicDNS (100.100.100.100).
Whelp, nextcloud isn’t known for being fast. I don’t have hundreds of thousands of emails yet so I can’t comment on that, but one thing for sure is as you put more and more data on it, you’ll have to add more CPU and RAM to it or it’ll getting more and more sluggish.
I think using container instead of VM should be better for maximizing resource utilization in a raspberry pi. Instead of partitioning your tiny 8gb RAM into 3-4 VMs with even tinier RAM each, you can run a dozen of containers and probably still have some free RAM.
Believe it or not, NextCloud. It actually can work as an email client. And it can sync calendars, contacts and todo list too.
I always look for excuses to get more servers, so if you ask me, I’d say yes, get that new server. There’s no such thing as having too much servers since there are so many things I want to self-host.
I also regularly tear down my servers and see how fast I can set it up again. Keep my deployment scripts up to date.
Usually there is a flag to disable muted video autoplay on every major browsers: https://www.technipages.com/turn-off-video-autoplay-firefox-chrome/
Safari has it too: https://support.apple.com/guide/safari/stop-autoplay-videos-ibrw29c6ecf8/mac
Here is the documentation, pretty bare though: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/oauth2.html
I use keycloak. Pretty steep learning curve, but once properly set up, it can do pretty much anything.
But if you’re in a pinch, NextCloud can act as an OIDC auth provider out of the box.
Does ssh works? If yes, you can use autossh to create persistent ssh tunnel to your VPS.
Eh, the core dev is a bonafide tankie though, which immediately apparent when you check his activities on Lemmy.ml and lemmygrad, but who cares. The software is open sourced, with plenty of contributions from people all over the world in the past few months. The moment the dev brought politics or other shenanigan into the software, it’ll going to get forked immediately.
It’s a piracy-related instance, right? Could be taken down by their host due to some complains. Lemmy.dbzer0.com had to migrate to another host a few days ago due to such complains.
OpenNIC is free, but pretty much almost no one use them. But I think lemmings would love them because of their open and democratic nature.
If you don’t want to pay, there are other alternative domain name system, like OpenNIC. The problem is, most operating system don’t recognize them so you’ll have to go out of your way to install them into your machine, which significantly limit their adoption.
I don’t think you’ll miss anything. If pihole works for you, then there is no need to switch to adguard.
One thing I found helpful is configuring my router (asuswrt-merlin) to transparently route all dns request to my adguard instance. You might already heard that some apps and IoT devices tried to be clever and hard-coded their dns server so they can evade dns blocking (I’m looking at you Netflix). If your router support redirecting all dns request to a custom dns server, definitely use it!
Sounds great! By the way, if you’re using docker, be careful not to accidentally have a container open a port on all interface. Even if you have a firewall configured on the machine, sometimes docker can punch a hole without you knowing. Might be a good idea to run a port scan from an external computer from time to time just to makes sure no unwanted open ports.
Unfortunately, I can’t say for sure if your instance will reliably get the deletion requests and process them. I did a small test to see how deletion works a few days ago and it doesn’t seem to propagate reliably as the deleted comment is still up in another instances, even now, though other instance such as lemmy.world seem to delete it. Not sure where it went wrong either, could either a bug, instances get overloaded and didn’t receive activitypub message correctly, or OP’s instance was improperly configured, but I sure hope it’s just an isolated incident.
Like I said before, If this still worries you, you can just delete older image files in the pictrs directory every few months to make sure you don’t host user-uploaded files for too long.
If you look at the chart, pretty much nothing comparable to the same period last year. January 2023 is a lot higher than January 2022 for example. July 2023 is also higher than July 2022.
Some people say manually purging the activity table for entries older than a week or so should be safe enough.
The risk is pretty small IMO, especially if you (or your friends) are the only one that use your instance (with registration closed so no random users uploading stuff to your own instance). If you disable nsfw on your instance, the chance of storing illegal images should be pretty low, especially if the communities you subscribed are moderated as deletion from mods will eventually processed by your own instance. If this still worries you, just nuke pictrs directory every few months, perhaps automatically using a cron scripts that delete images/gifs older than a few months.
I just checked my AMD box and tailscale there can consume ~15% of cpu time when the tunnel is under active use. When it’s not used it’s ~1.5%. But it’s a low power old AMD cpu though (AMD G-T56N), so I’m not use if it compares to Ryzen 5. On my intel machine, it’s ~5% when under active use, and idle at ~0.5%.