Check out EFF cover your tracks: https://coveryourtracks.eff.org/
The results are very interesting. For me, the most unique thing about my browser was that I had two system languages, and so the accept-language header was very unique.
I now use vanadium (graphene OS), which simply sends made up values for a lot of headers, and so makes fingerprinting harder.
In general, you should try to be as “normal” as possible, use standard settings for everything, just accept English, etc…
I would put truenas on the NAS, also put a VM on truenas with 16-24G of RAM.
Create a kubernetes or docker swarm cluster with server 1 and the nas vm and just have everything as containers. This way you just have one resource pool, and the containers will be started wherever there are enough resources available. The containers will mount NFS shares from truenas which truenas will create automatically as ZFS datasets. ZFS supports snapshots.
It gets funnier. A millionaire flew two flat earthers to the south pole where they proceeded to live stream the 24 h sun. Its called “the final experiment”. Yet one of the flat earthers still said the earth was flat.
This is probably the way, because a traditional “mail server” is actually 4-5 different servers working together.
And they can all be very easily misconfigured to break everything completely. Great learning experience though.
GrapheneOS provides users with the ability to set a duress PIN/Password that will irreversibly wipe the device (along with any installed eSIMs) once entered anywhere where the device credentials are requested (on the lockscreen, along with any such prompt in the OS).
No I’ve never seen this. Usually they send you an email to the admin address of the domain with the code.
Its always encrypted, just that the keys are in RAM when it runs.
In case of graphene though you can have a distress pin that wipes the encryption keys, making the phones content irrecoverable.
I’m not sure, I got a used Pixel so I can use graphene.
It exists and is called graphene OS. It is primarily focused on privacy and security though and as such only supports google pixels since they have both good hardware security and fast security patches. Most others fail at one of the two.
Otherwise you could install calyx OS.
I’m using it and never going back.
It’s not just the privacy aspect, but the fact that most results in other search engines suck. The first two pages would usually be ads - first the bought ones, then company websites and copywritten blogs. I get that way less with kagi. I find useful stuff faster and my brain is less polluted.
Jokes on you, using AI I got that time down to 4 hours trying to convince it to create working code, and 3 hours of debugging.
Nextcloud has collabora integrated.
I would put this stuff behind VPN.
The question to ask yourself is why is cloudflare offering that service for free? Probably because they get something out of it, like analysing the data.
Seems weird to me, the router would need to do deep packet inspection of DNS and selectively block specific ones. It feels more like you’ve set up your DNS to do forwarding instead of resolution. Can you post a network diagram and the DNS config?
Do tcpdump host $server instead. Otherwise you will only see the request (the response goes to a different port).
Just to be sure you do dig A @server $domain (with the “A”) and can confirm the following
SERVER is your server
;; ANSWER SECTION is empty (or doesn’t exist)
;; AUTHORITY SECTION mentions your local DNS server
Also check
dig NS @server $domain
Is your server in the answer section?
Here is how I would diagnose (I’m assuming you have Linux / WSL on a client)
dig $domain check which server answereddig a $domain should give a recorddig a $domain @server to make sure you’re querying the right serverIf none work, probably network issue (DNS boind to wrong IP, firewall, etc)
If 3 and 5 work but 4 doesn’t, your DNS isn’t authorative.
If only 5 works DNS settings on the client is wrong.
Roles in authentik are for permissions in authentik. You want a group instead. Group memberships are send via OIDC.