Just don’t bring any device to a protest if you consider bringing a burner device.

Well, I was hoping they would take care of that themselves

Looks good, I use a lot of the stuff you plan to host.

Don’t forget about enabling infrastructure. Nearly everything needs a database, so get that figured out early on. An LDAP server is also helpful, even though you can just use the file backend of Authelia. Decide if you want to enable access from outside and choose a suitable reverse proxy with a solution for certificates, if you did not already do that.

Hosting Grafana on the same host as all other services will give you no benefit if the host goes offline. If you plan to monitor that too.

I’d get the LDAP server, the database and the reverse proxy running first. Afterwards configure Authelia and and try to implement authentication for the first project. Gitea/Forgejo is a good first one, you can setup OIDC or Remote-User authentication with it. If you’ve got this down, the other projects are a breeze to set up.

Best of luck with your migration.

Yes, but it’s incompatible with the way I handle access control. I think I did it with Remote User authentication, which breaks all the login mechanisms of diverse apps, even though it’s officially supported by the projects. That’s why I only choose projects where the frontend is a PWA or they support oidc.

So I just installed the PWA, which works great.

I didn’t read the whole article, just a cursory glance really, but it seems like that is the exact other way around that I would want it.

I’m thinking of scanning a paper bill with my phone, extracting the text and matching parts of the text to firefly fields, like transaction description, source account, destination account, amount and maybe categories/tags.

I have Firefly III and am really quiet happy with it. I might write a companion program to scan bill though, since doing everything by hand is rather time consuming.

There are minecraft reverse proxies, so, yes, a http proxy will not work, but the general idea is still viable and doable with very little effort.

Set up a few domains all resolving to one IP. Run itzg/minecraft-router and use that to proxy the traffic to different servers based on the domain.

Also, they don’t even need a reverse proxy, but just resolve the domain name to the IP (in the simple case of one domain name per I0). That can be accomplished by hosting their own dns server, editing the hosts file or just pointing a public dns record at the private ip address, which will only work in their network,l.