Then swap you nameservers to a DNS provider that allows that?

Immich requires to be run on a server to function, but a lot of (or even all) of its functions are things that could reasonably done entirely on-device. Aves combined with some automatic backup solution such as Nextcloud gets (from what I can tell) most of the functionality Immich offers.

How would you backup Immich on device?

And if you backup to Nextcloud than you already have a served?

So you are arguing that having a file server is enough? And processing is done on client side?

That would be in this case very inefficient.

1. You would need to have all the data on the Client or transfer all the data to the client once you load it.
2. You device has to do all the processing which would lead to lower battery life.
3. How do you handle multiple Users? Giving partially access to the Filesystem?

I could come up with other points but this should give you an idea. Yes, for some use cases a server-client approach does not make sense but for a dedicated photo backup and indexer it absolutely does.

I am fully backing up my Mail Server with some exclusions like /tmp etc. with restic now for over a year, including updated binaries and docker images etc. and have about 16GB of data with hourly backups for over a year.

If you use any kind of deduplication and or compression, the system files do not amount to any meaningful size (assuming there is no additional encryption on the VM disks). Especially when you consider the size of OPs data, 1,5TB, then the couple of GB of system binaries etc. do not really matter.

That’s also my take on the topic and that is also what backblazes data is suggesting. Would they not believe it themself then they would stop buying unreliable drives. Every brand can have outlier models that have a bad failure rate.

I use dd.

deleted by creator

Go with the drive with the best money/TB rate that meets your criterias. I would consider everything above ironwolf or red plus fitting for NAS use. Data center drives are in my experience often cheaper than NAS drives. (wd ultrastar or seagate exos or toshiba enterprise capacity)

Look for the warranty. Some times another drive for just a couple of bucks gives you a way longer warranty.

And as backblaze says themselves every time, this data is not.the complete truth either, they have large sample size but this sample size is still too small to large claims about reliability. Especially about brand reliability.

deleted by creator

It is just not the way the usual scammer and spammers operate. Ofc there are other types of criminals that do operate differently but those do not get their Addresses from a data leak which E-Mail aliases pretect against

Why should a scammer or spammer bother with a tech savy person. Scammers and spammers use E-Mail dumps from data leaks to spam and scam ppl. The first step is automated, way more profitable then to go spear fishing on a normal user.

Is that of itself not an opinion…?

Nope. It is objectively opinionated, since he only shows his solution and offers or shows no other solution.

Tbf I haven’t looked at the source material but I don’t think two points make it “outdated”. It’s like calling Debian outdated.

Debian is not outdated, also is the technology not outdated he used in the guide (as far as i can tell since i have not read through everything). But using those to get to the shown solution is outdated. When someone in this community asks for a VPN solution most ppl will recommend Wireguard and or tailscale and not OpenVPN.

OpenVPN has other benefits like better user management and more customizability but for this use case it is not the fit, since other solutions are easier to setup and harder to fuck up the security part for a beginner.

Edit: Those are only the 2 examples i picked. I have not looked through everything, but those 2 stood out to me by just looking at the ToC.

Looks like there are lots of ppl angry that i call out the software they use. And they seemingly also have not even any argument.

This is correct, i missed that part. pfSense is mentioned 259 vs. OPNsense 3 times. But only the “not nice part” is mentioned and not the hostility towards FOSS. Here are some examples https://github.com/rapi3/pfsense-is-closed-source

I have not vetted every single claim but just alone that fact that they have this closed source model is enough for not using it. OPNsense is to my knowledge fully open source.

OpenVPN is still a solid option and widely used today.

Absolutely, but Wireguard is simpler to setup and comes by default and by design with a more secure default config.

• Create keys on host and on clients
• Generate a config
• You now have a secure VPN Setup.

Now look at all those options you need to tune on OpenVPN.

even though the company behind it isnt perfect.

But then why recommending pfSense? OPNsense is the same with a much more FOSS friendly company behind it. Yes pfSense is at the moment ok but no reason to use it over OPNsense imho.

People should still be able to use whatever software they like without being juged by it.

Yes. And i never judged anyone running thr software, only ppl who recommend it.

Its better for people to at least start with something, rather than nothing

I am not sure about it. Personally, when i get into a new topic i like to have comparisons. They show me what is actually relevant and what i should look out for. But maybe it is just me.

I said multiple times “recommend” here, but that is actually my main problem, i would be much more ok when he simply said there is x and y also available but i use z because of 123…

This guide is heavily opinionated and simply outdated. 2 examples:

1. use of openvpn. Wireguard is by design way more secure (use of keys instead of passwords) and is way more performant.
2. use of pfSense. Yes pfSense is ok but the company behind it has shown it hostility towards open source and foss multiple times. Why should a beginner use PFsense when OPNsense exists. OPNsense is not even mentioned.

And that are only 2 points i discovered while scrolling through. Louis is a great guy but as it looks like he should leave that topic to other people.

Yes they could also redesign the whole product for a few ppl who will plug it into an old PC that still uses vga or an old server that has no IPMI.

You realise how big the VGA connector is relative to the product?

Cant you just use a dongle?

And it is heavily opinionated, without pointing out other solutions like for example the use of openvpn without mentioning wireguard even once.