I was in the same place as you a few years ago - I liked swarm, and was a bit intimidated by kubernetes - so I’d encourage you to take a stab at kubernetes. Everything you like about swam kubernetes does better, and tools like k3s make it super simple to get set up. There _is& a learning curve, but I’d say it’s worth it. Swarm is more or less a dead end tech at this point, and there are a lot more resources about kubernetes out there.

They are, but I think the question was more “does the increased speed of an SSD make a practical difference in user experience for immich specifically”

I suspect that the biggest difference would be running the Postgres DB on an SSD where the fast random access is going to make queries significantly faster (unless you have enough ram that Postgres can keep the entire DB in memory where it makes less of a difference).

Putting the actual image storage on SSD might improve latency slightly, but your hard drive is probably already faster than your internet connection so unless you’ve got lots of concurrent users or other things accessing the hard drive a bunch it’ll probably be fast enough.

These are all Reckons without data to back it up, so maybe do some testing

Sounds like a great idea - I suspect the biggest obstacle will be finding someone at the home who is confident enough in what to do with it to be willing to accept it.

I’ve run into similar issues with schools where they are hesitant to accept donations of things like that because they don’t want to be saddled with equipment they don’t know how to use and maintain. Maybe worth seeing if you can raise a bit of money for a second hand Xbox or something?

Pretty much - I try and time it so the dumps happen ~an hour before restic runs, but it’s not super critical

pg_dumpall on a schedule, then restic to backup the dumps. I’m running Zalando Postgres in kubernetes so scheduled tasks and intercontainer networking is a bit simpler, but should be able to run a sidecar container in your compose file

If you figure it out, I know several companies that would be more than willing to drop 7 figures a year to license the tech from you

git-annex maybe?

Yeah, they are mostly designed for classification and inference tasks; given a piece of input data, decide which of these categories it belongs to - the sort of things you are going to want to do in near real time, where it isn’t really practical to ship off to a data centre somewhere for processing.

Because accountants mostly.

For large businesses, you essentially have two ways to spend money:

• OPEX: “operational expenditure” - this is money that you send on an ongoing basis, things like rent, wages, the 3rd party cleaning company, cloud services etc. The expectation is that when you use OPEX, the money disappears off the books and you don’t get a tangible thing back in return. Most departments will have an OPEX budget to spend for the year.
• CAPEX: “capital expenditure” - buying physical stuff, things like buildings, stock, machinery and servers. When you buy a physical thing, it gets listed as an asset on the company accounts, usually being “worth” whatever you paid for it. The problem is that things tend to lose value over time (with the exception of property), so when you buy a thing the accountants will want to know a depreciation rate - how much value it will lose per year. For computer equipment, this is typically ~20%, being “worthless” in 5 years. Departments typically don’t have a big CAPEX budget, and big purchases typically need to be approved by the company board.

This leaves companies in a slightly odd spot where from an accounting standpoint, it might look better on the books to spend $3 million/year on cloud stuff than $10 million every 5 years on servers

Seems pretty reasonable. At the end of the day people have to eat, so projects like this either trundle on as hobby-and-spare-time projects for a few years until people get bored and burnt out, or you find a way to make working on the project a paid gig for the core people

This is an “x-y question” - what are you actually trying to achieve?

Clearly you are concerned about… someone… knowing your home IP address - who, and why?

Definitely interested - is the mainline situation any better than with ARM?

I’ve been bitten before with a device that “supports” a major distribution, but only if you install our custom pre-built image (good luck auditing what we’ve tweaked) and only with our special pre-built kernel that isn’t even an LTS version, and has a bunch of patches applied to support whatever weird peripherals we decided to throw on the board, and will get exactly 0 updates after the initial release.

Raspberry Pi gets around this by being big enough to get buy in from vendors (Ubuntu distributes a special kernel + firmware bundle), but support for all the other smaller knock offs seem shaky at best

As in, hardware RAID is a terrible idea and should never be used. Ever.

With hardware RAID, you are moving your single point of failure from your drive to your RAID controller - when the controller fails, and they fail more often then you would expect - you are fucked, your data is gone, nice try, play again some time. In theory you could swap the controller out, but in practice it’s a coin flip if that will actually work unless you can find exactly the same model controller with exactly the same firmware manufactured in the same production line while the moon was in the same phase and even then your odds are still only 2 in 3.

Do yourself a favour, look at an external disk shelf/DAS/drive enclosure that connects over SAS and do RAID in software. Hardware RAID made sense when CPUs were hewn from granite and had clock rates measures in tens of megahertz so offloading things to dedicated silicon made things faster, but that’s not been the case this century.

Por qué no los dos?

I’d be super surprised if this was western intelligence. Stuxnet escaping Natanz was an accident, and there is no way that an operation like this would get approved by the NSAs Vulnerabilities Equities Process.

My money would be MSS or GRU. Outside chance this is North Korean, but doesn’t really feel like their MO

It’s not just let’s encrypt - the common names of any SSL cert issued by a public CA have to be recorded in a public certificate transparency log. You can use tools like https://crt.sh to search the logs

Previously Gandi, but they’ve jacked up their prices and cut features, so in the process of moving to AWS Route53.

My main requirements are:

• Competitively priced (doesn’t need to be the absolute cheapest, but the feature set better justify the price)
• Able to manage domain with Terraform (I’ve got 10 domains, and copy-pasting DNSSEC keys around gets old really fast)
• Not be CloudFlare (fuck those guys in particular)

How’s the rollout of the 10G stuff going? Seems like it’s been coming “soon” for the last couple of years. Not that I could actually make use of 10G down.

950 down, 500 up for $109NZD/month

A quick guide to explain what is going on here, and what the numbers mean: https://pbs.twimg.com/media/DaMLUoGXUAI21V6.jpg:large