First reason I think of to use fde all the time even if it’s automatically unlocked, is it’s simple to securely delete everything all at once. Just delete all the keys or overwrite that section of the desk.

Yes, you can have docker scripts decrypt a drive/storage. You might also consider an encrypted home partition separate from the root partition, or user space encryption of your home directory.

Surely messaging would have happened beforehand if US had given a green light to Israel before the attack… Right?

I think when people want to remotely decrypt fde the usual advice is installing dropbear SSH to remotely enter the password. Sorry for not providing links but it should be easy to find.

Firefox Send is open source, even though the public service is no longer offered.

Here are some public instances and instructions for self hosting: https://github.com/timvisee/send-instances/tree/master?tab=readme-ov-file

¯_(ツ)_/¯

Just showed up when I was posting from this client (Eternity). I saw it for like half a second before the picture appeared and didn’t bother digging to figure it a purpose

“Bad lay, can’t box.”

Thanks for posting this. The idea of individual services having their own IP address had never occurred to me and would solve so many issues.

I have not tried Matrix yet but I hear it’s a good replacement, fashioned more to the likes of Discord but I think it has everything you’re looking for

Occasionally some manufacturers use some weird proprietary connection but usually both DVD drives and 3.5" disks use the same SATA connectors. Heck, even in the old IDE/PATA days you could use the same connection on either.

So yeah, the connection is the same and probably will plug and play without any configuration needed

I’ve heard that immich and other picture-organizing software can will something like this?

I don’t have my glasses on right now but just reading the title, sounds like you might want this

https://en.m.wikipedia.org/wiki/Wikipedia:Database_download

So, to be clear, GitHub is not git. Git is intrinsically distributed. GitHub is basically a repository Management service.

I did some googling for about 10 seconds and afaik GitHub does not support any type of self hosting. I know you can selfhost gitlab , but I don’t see a project for either GitHub or gitlab called spokes.

Not knowing anymore than this about what you actually want to accomplish, my advice would be to just figure out how to run your own git server (without the management fluff) and do a 3-2-1 backup scheme. You could of course also create a gitlab instance with an HA set-up, plus backing that up to the cloud.

https://github.com/hashicorp/envconsul

I just bought some PoE hats for my rpis, and have a managed PoE switch; rumor is, this combo basically translates to rPi WoL.

(Not meaning to ignore the rest of your comment, but not in a position to respond fully)

This has been on my mind, I have yet to do it but the implementation seems trivial.

You can use typical luks full disk encryption with a password. Luks actually has five password slots. Passwords do not have to be actual text, they can be a file or even part of a file.

So my idea is, buy some really cheap, low profile USB flash drives and store some seemingly innocuous data like cat pictures or public domain books, IDK and it doesn’t matter what the actual data is. Use full disk encryption and set a regular password, then add a second password that is a file or part of a file that lives on the flash drives, and have it set up to look for that file on boot as an option for unlocking.

Now the disc is fully encrypted but will boot/reboot without interruption as long as the flash drive is installed. You can remove the flash drive when you’re feeling paranoid, or even better only install it when you are going to be away for a while. If you leave with the machine having the flash drive but are feeling worried, you can remote into the machine and edit / delete the file or just clear the key slot from Luks.

That’s what’s been on my mind, anyway. I think the typical suggestion/solution is to just use drop bear and remotely unlock using that, or don’t use full disk encryption and selectively encrypt your data instead (partitions or userspace encryption).

I’m not going to proofread this so I hope it makes sense

Perhaps a good time to mention I have several raspberry pis I could add to the mix.

Yeah, this legit slaps