Plain old docker compose since it seems to come with by far the fewest surprises and is most widely supported.

Nearly every project of interest has a compose.yml available, which is hardly true for systemd services, nix services, or for podman/kubernetes.

I was using podman-compose briefly, but it is just different enough to break in unclear ways and I kept having to fight with it so I went back to docker docker to eliminate the headache.

Plenty of people are now old enough that they can go see a doctor themselves and get the diagnosis that their parents never bothered to or were unable to bring them to get when they were kids.

I have had the Sandisk Ultra Luxe 512GB version for a few years now with Ventoy on it and have been very pleased with it. I keep a cheap USB-C to USB-A attached to it and that lets me use it with my phone or on any computer.

“What is your favorite self-hosted application?” had what looks to be about 15 matrix responses.

Would potentially be interesting to see Matrix/XMPP/etc prevalence in future surveys, maybe replacing ‘what activitypub apps’ with a more generic ‘what federated apps do you self-host’

pass-otp

Solid Explorer

Yeah that’s going to be a very handy feature and a strong motivator for me to get the untracked amount down to zero.

I think shared hosting there is more meant to refer to the older “upload your files in webmin and we’ll shove them in /cgi-bin/ with everybody else’s”-style hosting where multiple users sites are running on a single instance of a webserver versus a VPS giving you a VM with SSH access?

deleted by creator

Where the metadata goes I think is important as well.

All Signal metadata necessarily goes through Signal’s servers and is tied to your phone number, but not all Matrix metadata ever gets near the Matrix.org if you are using a different homeserver.

I think both are less than ideal in that regard, and I think Briar (strictly P2P) has a much better model for dealing with this at the expense of generally being a UX disaster.

The server software appears to be available and updated now, which they’ve been spotty about in the past. I’ve updated to remove the closed-source part since that is not correct.

As for phone number: Signal still requires me to enter a phone number to create an account as of about 5 minutes ago.

Signal is centralized, closed-source, not-selfhostable (edit: in any meaningful way) and requires being attached to a phone number. (Edit: server source is available, but self-hosting requires recompiling and distributing a custom app to all of your contacts to actually use it.)

Matrix is decentralized, federated, fully open source with multiple client and server implementations, self-hostable, and does not require being attached to a phone number.

Possibly not relevant to your use case, but one point that I haven’t seen mentioned yet is that for many SUVs that are available in both FWD and AWD, the tow rating will be significantly higher for the AWD version (like 5000lbs vs 3500lbs for FWD in the case of the Toyota Highlander and Honda Pilot)

Matrix (federated) or Briar (multi-modal P2P) are both good options for getting rid of dependency on central organizations.

What part were you getting hung up on?

Used Ubuntu for ~15 years, switched to NixOS a couple months ago and haven’t looked back.

I’ve made a habit of clean installing all of the desktops/laptops/servers in my life on the first point release of each LTS (i.e. 22.04.1). That would mean there was time for the dust to settle and for me to tweak my install/customization scripts from the previous LTS.

So since I knew I was gonna have to modify my Ubuntu install scripts to work with 24.04 anyways, I fiigured it was a decent time to try and see if I could get the install scripts converted to a nix config instead, and it ended up working a treat.

If you are dead set on a specifically certificate-backed access control scheme, a VPN with the ability to use the hardware-backed certificate store (such as OpenVPN) is likely easier to set up as it is better supported on mobile devices and doesn’t require application-level support (i.e. everything is protected, not just the apps w/ mTLS support)

https://openvpn.net/faq/how-do-i-use-a-client-certificate-and-private-key-from-the-android-keychain/

I do find rclone to be a bit more comprehensible for that purpose, rsync always makes me feel like I’m in https://xkcd.com/1168/

Must have an android client,support mtls,support attachments and card layout.

ps: pls don’t suggest to save to local storage and sync that.

pls don’t suggest this app that cant do that but its great.

Anyways anyone aware of any app that can do that?

Nope, you seem to be well aware of the options available to you and there isn’t any one single app that meets all of your requirements, so unfortunately we can’t recommend anything at all to you, per your specific request.

You’ll have to build it yourself either from scratch or by taking one of the existing open-source tools and adding the missing functionality.

Looking forward to your pull requests!

Restic and borg are both sorta considered ‘standard’ for doing incremental backups beyond filesystem snapshotting.

I use restic and it automatically handles stuff like snapshotting, compression, deduplication, and encryption for you.