How are you accessing all of it? Custom URLs? Reverse proxy?

Forgejo is for private projects only? Are you syncing them with some other git providers? If now how are you baking it up?

Vaultwarden for passwords

This one was the most tricky for me due to HTTPS but I finally got it working on desktop and android.

In my case I wanted to separate my services between the ones accessible from the internet (git. lemmy) and not (bitwarden, *arr). To do this I need 3-4 VMs. I went with proxmox for the backups: you just define retention policy and that’s it. Promox drops backups of VMs automatically keeping the right amount of old versions. If you don’t want to split your services and you’re fine with just one VM I think you can easily go with pure debian. I did have some issues with proxmox (like failing network card, it required some fiddling) so it’s not “free”. There’s some extra work to get the benefits.

And I think having everything in one VM is also fine. I’m only splitting it because I want to have some things accessible from the internet. If not I would just use docker for everything.

I tried just using WIreguard and I struggled with with setup. When it fails to connect it’s really hard to figure out what the issue is (port forwarding on one of the routers? firewall on the server? something else?). WIth my netbird setup I’m also relying on DNS, groups and exit node setup. I think it’s just easier with a clear dashboard like the commercial tool have. Netbird is also free and I’m planning on selfhosting netmaker.

I tried some keypass tools and immediately went back to Vaultwarden. Bitwarden clients work offline until you have to sync, no risks here, but the user experience is way way better. It’s easier to add new accounts, search for them, store additional data like addresses or credit cards and fill them out automatically. I can imagine using keePass for some password I have to access once a week but not for everyday use in my browser and on mobile.

No idea what it uses but I used on GrapheneOS without issues.

I would organize a group of bandits to raid small local communities.

They are worried about vulnerabilities that are introduced knowingly. They said that in the past you could trust that if someone spend months writing code for you project he did it with good faith and not to sneak a backdoor past you. Basically they assumed a hacker would not invest months of work trying to add a bug to an open source project because it’s just not worth it. Now, because of AI, someone can easily create big PR with a hidden bug hoping that it will get merged.

I have no idea how true it is (i.e. if AI is able to generate a big PR that will pass all the checks and get approved) but logically it does make sense.