The scraper blocklist on crowdsec requires a paid subscription, though, or did you find another workaround?

Imagine if some big influencers like him switched to peertube, that would be quiet a thing indeed.

I did something very similar via netcup tiny vps, nginx and wireguard. I could post my setup notes tomorrow if someone needs them.

You forgot the number one rule about the usenet: you don’t talk about the usenet.

It’s true there are a lot of better alternatives to jami when it comes to privacy/security: Here’s a good comparison table:

https://www.messenger-matrix.de/messenger-matrix-en.html

Matrix seems a bit overkill. I think they would be better off with something like gotify.

Take a look at dontkillmyapp.com to see if your phone provider hinders your messages.

There is unified push as Google alternative as well, which works with the schildichat matrix client.

I’ve used jitsi meet (own instance) for this before. OBS might work as well.

Some cars now even have break lights that shine brighter than the light of a thousand suns. I don’t get it, there ought to be some regulation for this. This is Germany speaking.

I’ve been with 1984.is for a couple of years now. I think my domains cost around 12 Euros a year each. Their web GUI works fine and I’ve never needed to contact their customer service, so I cannot comment on that.

Openwrt generally works great on x64 PCs. Thiss machine will most likely be more beefy than your home router and could become your main firewall. It can handle adblocking and vpn client for all PCs on the network as well or whatever your need, as openwrt can do many nice things no commercial router can do out of the box. Install openwrt on your home router as well and use that as access point (connected via cable). You will improve your wifi signal as well. If your machine does not come with rj45 lan ports, install usb3 to rj45 adapters to the usb3.0 ports. They will give you the full 1000 mbit speeds.

You need to change the nginx config (for the website you will be hosting your services at. /etc/nginx/sites-available/yourdomain.com

You can reroute all http requests to https in that config.

Watch a video on how nginx works and how to set it up, and then look for example nginx configs for your services. It’s a pretty standard setting nowadays so the syntax should be easy to find.

I think nginx can be setup to work locally only, but do you even need it for that? It’s primary use is to proxy http requests to the different websites running on your server, enable https via letsencryt and so on, I think.

Dawn sounds very interesting. It seems to need 802.11k and 802.11v on all AP-nodes, I am not sure they are supported by my hardware though. I’ve never heard of those standards, so it seems unlikely.

I also just read about a user complaining about crashes related to dawn. Does it run stable and does it also switch to the 5ghz band or does it seem to prefer 2,4ghz, as another user noted three years ago.

Do linkwarden instances federate, so that it can act as a decentralised way-back-machine?

I recently heard the idea to donate monthly to one project of your choosing so the developers could rely on a steady income. I think that’s a great way of doing it.

I’ve been using docus (izzys fdroid repo) for some time and can recommend it.

Edit: it seems it’s no longer being maintained.

Podcasts are a leftover from the non centralized and non-monetized internet of the past. Because is that most Podcasts are still available as rss feeds, so you should only ever get adds if they are spoken by the Podcasts hosts. Ate you taking about those? Only something like sponsorblock would help against those. I use antennapod (fdroid) on android to listen to Podcasts. Sine hosts always start their podcast with an add, but you can autoskip the first minute of a certain podcast with antennapod every time. It has a setting for that. Antenna pod itself is foss software without adds.

I use Syncthing-fork (fdroid). It lets you set you granular per folder settings like only sync on home WiFi.

Could you explain why you wouldn’t use it?

I’ve been using it for a couple of years and am happy with it, it grants an extra layer of security I think, if you can wipe the device when lost/stolen. Also very handy if you misplaced the phone and its set to not ring, as with this it will ring at full volume. You don’t need to use their server for the app to function, if that is your concern. I use a secondary device from my household. You can send a text message to your phone to let it ring even when its set to silent mode/get its location/or even wipe it remotely.

Ok, yeah, you’ve got a point I think. But one could argue if microg is enabled by default, at least some info might leak to google as their push servers are contacted and a device id is created (even if the data is anonymized to some extend.). (Depending on if these settings are enabled by default in microg which I am not sure of).

Here’s some info from the divestOS faq (cmp.: https://divestos.org/pages/faq):

"Anything important I should know about microG?¶

The 'Google device registration' and 'Google SafetyNet' options WILL make microG connect to Google servers.
The 'Cloud Messaging' option WILL make microG maintain a persistent connection to Google servers.
The 'Cloud Messaging' option does NOT require a Google account.
The 'Google SafetyNet' option WILL download and execute proprietary obfuscated code from Google and is strongly NOT recommended.
While microG itself is open source, any apps talking to it will do so using the proprietary Google Play Services library."

It goes on to provide some guidelines if you want to use microg:

How should I configure microG?¶

"Depending on the apps you want to use there are a few different ways you can use microG.

Some apps don't need microG but check that they were installed via Play, in this case you only need microG Companion/FakeStore and to install the app via `Aurora Store` (via session installer) or `Obtainium`. This mechanism only works on 18.1+ currently, adb workaround still necessary on older versions.
Some apps will work with microG simply installed without any Google connections, in this case it is strongly recommended to revoke Network permission from the microG app.
Some apps need push notifications via Google, for them you must let microG maintain a persistent identifiable connection to Google. Enable 'Google device registration' and 'Cloud Messaging' in microG.
Some apps require a captcha to be performed by the user, for them you can enable the 'Google SafetyNet' option.
Some apps require SafetyNet to work, while the option to enable it currently exists it will not work in the unprivileged mode that DivestOS uses and will be removed in a future update."

So depending on your thread model, you still would want to disable some of the options in microg to have absolutely no leakage of data to google. For example I am not comfortable any more with using push notifications since it was revealed that state actors use this info to tail users communications.

Here is a thorough analysis of /os’s security and privacy.

https://www.kuketz-blog.de/e-datenschutzfreundlich-bedeutet-nicht-zwangslaeufig-sicher-custom-roms-teil6/

Tldnr: it’s alright but but grapheme, divestos or calyxos should be preferred if those are available on your device.

Problematic seems the unique device id /e os generates and sends on every update and also security updates for the integrated webview browser have been severely out of date in the past.