So instead of querying a recursive dns service like cloudflare or google you query the 13 root DNS servers such as https://a.root-servers.org/

This way no data goes through 3rd parties. However, this is a poor idea since none of the root servers support encrypted DNS queries.

You can use DoH or DoT. DoT already has its own port 853 which can be firewall blocked. So then DoH can be harder to block because it uses port 443 same as HTTPS hence the name.

So the best way of doing it is either using ODoH which uses a proxy to ask on your behalf, but the proxy knows your IP address.

DNS privacy is in my opinion a farce because someone knows your IP address and someone knows your queries. The best way is to hide in numbers and the external promise of no logs queries.

So for me, I just pick the fastest encrypted no logging DNS servers. And the top 3 for my location is

https://dns.nextdns.io/

https://freedns.controld.com/uncensored

https://95.85.95.85/dns-query

I used this tool to help pick the fastest encrypted servers.

https://center2055.github.io/DNS-Hop/

Good luck and happy labbing

CIRA is hosted in Canada which is part of FVEY.

Sorry I’m not trying to nitpick. Everyone has their own threat tolerance.

I personally just use ODoH for now. Mostly using RethinkDNS with ODoH

They’re not energy efficient when they’re working, but usually servers are idle 95% of the time.

You’ll spend more money buying new hardware than the power you save.

You should realize that your piholes call to 3rd party DNS servers unless you use something like unbound which queries root DNS servers.

And by the way, those root queries are unencrypted too.

I use a VLAN that blocks it from my WAN interference.

All internal VLAN except my Internet only VLAN can print to it.

I use local send. It’s fantastic

I finally ran a hardware accelerated ML container for immich.

My immich is in a VPS and my GPU is in my home server. Cheaper to run that than to rent GPU compute.

I can’t suggest one for swimming, but this one is intriguing. Wanted to support it, but I hardly wear my own watch.

https://unawatch.com/

It’s modular and open source.

I disclose that I can see your activity, bit realistically it’s so I can see how the encoding process is half a world away. They don’t seem to complain about the quality so seems good to go for me.

Also I wish they sent me notes of which shows has offset subtitles. Can’t watch them all myself

I rsync everything with ssh keys.

Really easy to do.

Not really fixing the account issue, but can you use an email alias? I use one for my account.

I use ssh keys… And some firewall rules.

I do have an internet only and a LAN only VLAN at least.

I’m using immich as a daily driver for a year and some change now. The only breaking update was from beta to stable.

I have vital data with a friend who is also in a different continent. But we share some stuff. That one is only 16tb. And on a Pi, unsure how long that thing will last

My cloud is at my parent’s house in a different continent.

48tb of my own data and hardware.

Tuta also syncs terribly. Often when I open the app, the latest email are from weeks ago. And you can’t swipe down to refresh. I paid for a year, and quickly gave up within a month.

I’ve bought mine off TheArtofServer. You can ask the seller questions and they’ll happily help. Not to shill but the guy is super passionate about the HBA business.

I currently went overboard and got a tri mode LSI which is quite pricey. But it allows me to mix and match SATA, SAS, and U.2/3

Broadcom 9500-8i Tri-Mode is the model.

https://www.ebay.com/str/theartofserver

For sas and sata only I have a LSI 9305-16i for my big server. The 9305 runs quite cooler, but you pay more upfront.

Yes. When sharing the link you have the option to allow people to upload using that link.

I have it behind OAuth.

And then a reverse proxy via NPM.

I don’t know what else to do on it aside from keeping it fully VPNed.

€22 for 2core/2gb/20ssd? That’s not affordable