What part were you getting hung up on?

That’s news to me considering the EPA-rated fuel economy of vehicles with both hybrid and pure ICE drivetrains is universally higher for the hybrid versions.

An ICE vehicle needs a much larger engine than is truly necessary due to the inefficiencies and limitations of mechanical transmissions, whereas a hybrid can have a much smaller, more efficient engine.

A hybrid can potentially act like a ‘perfect’ transmission, capable of taking in power from an engine running at its single most efficient RPM and, with the aid of battery storage, produce any combination of speed and torque that has an average power less than the output of the ICE.

Used Ubuntu for ~15 years, switched to NixOS a couple months ago and haven’t looked back.

I’ve made a habit of clean installing all of the desktops/laptops/servers in my life on the first point release of each LTS (i.e. 22.04.1). That would mean there was time for the dust to settle and for me to tweak my install/customization scripts from the previous LTS.

So since I knew I was gonna have to modify my Ubuntu install scripts to work with 24.04 anyways, I fiigured it was a decent time to try and see if I could get the install scripts converted to a nix config instead, and it ended up working a treat.

If you are dead set on a specifically certificate-backed access control scheme, a VPN with the ability to use the hardware-backed certificate store (such as OpenVPN) is likely easier to set up as it is better supported on mobile devices and doesn’t require application-level support (i.e. everything is protected, not just the apps w/ mTLS support)

https://openvpn.net/faq/how-do-i-use-a-client-certificate-and-private-key-from-the-android-keychain/

I do find rclone to be a bit more comprehensible for that purpose, rsync always makes me feel like I’m in https://xkcd.com/1168/

Must have an android client,support mtls,support attachments and card layout.

ps: pls don’t suggest to save to local storage and sync that.

pls don’t suggest this app that cant do that but its great.

Anyways anyone aware of any app that can do that?

Nope, you seem to be well aware of the options available to you and there isn’t any one single app that meets all of your requirements, so unfortunately we can’t recommend anything at all to you, per your specific request.

You’ll have to build it yourself either from scratch or by taking one of the existing open-source tools and adding the missing functionality.

Looking forward to your pull requests!

Restic and borg are both sorta considered ‘standard’ for doing incremental backups beyond filesystem snapshotting.

I use restic and it automatically handles stuff like snapshotting, compression, deduplication, and encryption for you.

DigitalOcean and Vultr are options that “just work” and have reasonable options available in $5-6/month category.

DO is more established and I’ve used them for nearly 10 years now for a $6/mo VPS and for managing DNS for my domains. Vultr has some much closer datacenter options if you happen to be in the southeast US, rather than basically just covering California and NYC like DO does.

Given how common it is for people to use the ‘reset password’ link for this exact purpose, it does make it seem kinda redundant to even implement passwords on many services to begin with.

From some of the other comments, it seems like maybe the jellyfin server might be running on the desktop PC, in which case you can set the file permissions to be readable/writable by a group that both you and the jellyfin user are in.

You could potentially download to a mounted share drive via the desktop.

That is to say, set up an SMB server on the NAS and when you download music on the desktop, choose the SMB share as the download location.

It’s sorta goofy, but your LAN speed is almost certainly at least twice your internet speed.

People recommend backblaze B2 as a restic/rclone/borg backend because it works extremely well and is an excellent value compared to other available options at a near-flat $6/TB*month rate.

The reason they ‘force linux users to use their b2 product’ is very specifically done, on purpose, to avoid the exact kind of abuse you want to do, which is upload 18TB of near-incompressible data for them to store for $9/month or less.

Buy a 20TB harddrive and keep it in a fireproof filebox, and maybe another to keep at a friends house. You don’t need cloud backups for media you can reaquire relatively easily, save that for the stuff you can’t trivially replace.

What CPU governor are you using? I saved about 40W idle powerdraw switching to powersave vs the default on a Ryzen 9 3900X.

I ran RAID-Z2 across 4x14TB and a (4+8)TB LVM LV for close to a year before finally swapping the (4+8)TB LV for a 5th 14TB drive for via zpool replace without issue. I did, however, make sure to use RAID-Z2 rather than Z1 to account for said shenanigans out of an abundance of caution and I would highly recommend doing the same. That is to say, the extra 2x2TB would be good additional parity, but I would only consider it as additional parity, not the only parity.

Based on fairly unscientific testing from before and after, it did not appear to meaningfully affect performance.

125W (Less than $15/month) or so for

• Ryzen 9 3900X
• 64GB RAM
• 2x4TB NVMe (ZFS Mirror)
• 5x14TB HDD (ZFS RAID-Z2)
• 2.5GBe Network Card
• 5-port 2.5GBe Network Switch
• 5-port 1GBe POE Network Switch w/ one Reolink Camera attached

I generally leave powerManagement.cpuFreqGovernor = "powersave" in my Nix config as well, which saves about 40W ($4/mo or so) for my typical load as best as I can tell, and I disable it if I’m doing bulk data processing on a time crunch.

My partner and I use a git repository on our self-hosted gitea instance for household management.

Issue tracker and kanban boards for task management, wiki for documentation, and some infrastructure components are version controlled in the repo itself. You could almost certainly get away with just the issue tracker.

Home Assistant (also self-hosted) provides the ability to easily and automatically create issues based on schedules and sensor data, like creating a git issue when when weather conditions tomorrow may necessitate checking this afternoon that nothing gets left out in the rain.

Matrix (also self-hosted) lets Gitea and Home Assistant bully us into remembering to do things we might have forgotten. (Send a second notification if the washer finished 15 minutes ago, but the dryer never started)

It’s been fantastic being able to create git issues for honey-dos as well as having the automations for creating issues for recurring tasks. “Hey we need to take X to the vet for Y sometime next week” “Oh yeah, can you go ahead and put in a ticket?” And vice versa.

If the actual error rate were anywhere near that high, modern enterprise hard drives wouldn’t be usable as a storage medium at all.

A 65% filled array of 10x20TB drives would average at least 1 bit failure on every single scrub (which is full read of all data present in the array), but that doesn’t actually happen with any real degree of regularity.

I think it’s worth pointing out that this article is 11 years old, so that 1TB rule-of-thumb probably probably needs to be adjusted for modern disks.

If you have 2 full backups (18TB drives being more than sufficient) of the array, especially if one of those is offsite, then I’d say you’re really not at a high enough risk of losing data during a rebuild to justify proactively rebuilding the array until you have at least 2 or more disks to add.

And if they somehow do, rest assured that red states will use it as an opportunity to disarm LGBT folk for being ‘violently mentally ill’ before the ink is dry on the decision.

Very similar heuristic here, insofar as when to use passphrases and how long.

LUKS and Bitlocker volumes get 8 words, computer logins usually get 4 words (potentially more depending on frequency/criticality of system).

Smartcards and mobile devices do have numeric pins due to frequency of use and relative difficulty in copying those for offline attacks.

Websites that are filled in w/ password manager get passwords get the random symbol-laden strings that ‘meet requirements’