This. Tailscale just works and has functioning VPN on demand for your networks.

Password Pusher is no password manager, only for securely sharing information.

Running on Vaultwarden, though that still depends on the official BitWarden Clients. Works great though, and can be selfhosted on pretty small machines. Very satisfied with it.

Passbolt was not on my radar when I was in the market for a new password manager, but would be a serious consideration today.

If considering a self hosted alternative, remember that backups are your responsibility then as well.

One of my two machines crashed a lot until I moved two Containers to my local server. They are quite small in regards to RAM and at their limit quite fast. Maybe check that.

Also I read somewhere that you could enter credit card details and this kinda upgrades your account in their system though you still do not pay. Something to do with throttling free machines in favor of paid customers.

Oracle has an always free tier which provides two x64 AMD based virtual machines. They are more or less cloud based calculators in terms of performance, but out of experience I can tell you it is more than sufficient for a few docker containers.

European locations are available.

Well, not every system can handle or support multiple VPN connections with different providers, or the VPNs could interfere with each other. E.g. when using Tailscale you can not use another WireGuard based VPN according to their FAQs.

Also, it adds complexity to the stack and system as a whole on the client side. That is all fine and dandy as long as it works, but quickly a pain in the butt once you have to debug something.

Cloudflare Tunnels work great and are really easy to setup. Plus you are not exposing you machine completely to the outside, as the cloudflared service/container „calls out“, and Cloudflare is your reverse proxy. Downside is, you’re binding yourself to one of the US hyperscalers.

Pangolin uses the same principle, but is a bit more challenging to setup. Plus you need some kind of cloud server to make it work.

As you already have a VPN active at all times (at least it sounds like that), a VPN home seems out of the picture.

Unless you have a dedicated firewall at home, maybe reconsider the reverse proxy route. Personally would not feel comfortable with exposing a machine at home to the internet in full without a handle on what it can do or how it may be reached.

That is something you can configure in the settings for the mobile app. To ask for the master password every time is default behavior, but it can also be set to a PIN or biometric instead.

Exactly this. It checks periodically if a newer image for the tag of the container is available (e.g. vaultwarden:latest) and tells you about it. You can setup mail, sms, Teams, you name it.

So then you know a new version is available, can check the changelog and decide if the update is worth it.

Personally having great results with Diun. Same idea (check for newer container image) and works 100% for me.

Don’t know if it can automatically load and restart containers, rather do that personally.

Do you have requirements for the WiFi Standard?

Do you want to build up a new system or adding to your current setup?

For the price point you could look into the AVM Fritz Ecosystem. Their Mesh solution is quite hassle free and for 200€ you could get WiFi 5 capable devices on the used market.

Not sure how well they work with other brands, so you might want to invest in a FritzBox and FritzRepeater (should be in the budget used).

Anything above WiFi 5 could be out of your price range, especially new.

Ubiquity APs with WiFi 5 could be in your budget, even new. Look into the AP HD. You will need a controller installation though, weither on your desktop or on a NAS, Server. You do NOT need to buy an appliance from them for management. They do not make it clear on their website.

Yeah, same with forcing ISPs to save connection data on all users long term. European court slapped on the hands a couple of times, still not done. Like some kind of undead policy

To add on this: removed because it was clear the vote would not have been in favor.

Was pretty clear that it would return sooner rather than later.

At the end of the day it is a matter of preference and convenience. Is it safer to separate them? Absolutely. Is it as convenient as keeping them in one place? Absolutely not.

So, pick your poison. Personally I have my MFA tokens in three separate locations, two self hosted server applications and in a mobile app (2FAS Auth). More for fallback/backup reasons. Having them in my password manager is just too convenient.

Well, there is in the EU, but that does not help anyone not here.

An unlocked boot loader is something that would have to be forced from Apple’s hands like sideloading was in the EU. No way in hell they would pursue that on their own.

Rapairability is a point that bugs me as well, hoping for right to repair laws in the EU to force all manufacturers to make the devices better in that regard.

In regards to stock systems, I agree.

Been stuck in the convenient ecosystem for a while, and I cope by telling myself Apple makes the bulk of its money with hardware and services. Not ads like Google. But if I would start over from zero, I think Graphene OS and Linux would be the way. But migrating the whole family away from our current Apple line up - I dread that challenge.