Castopod looks interesting

Messages are only sent when both online though, thet’s the bigger difference (unless using Briar Mailbox). Also it can send over wifi and bluetooth without internet connection i.e. no other devices involved.

What’s going on?

https://www.theguardian.com/politics/2025/sep/18/jeremy-corbyn-clashes-zarah-sultana-your-party-split

An extraordinary split has opened between Jeremy Corbyn and Zarah Sultana in the formation of their new leftwing party, with the former Labour leader suggesting he will take legal action over an unauthorised membership portal promoted by his co-leader.

If you’re temporarily away from home do you need to workout? Which is to say you could let yourself off doing this, perhaps. Maybe being away from home is enough change to deal with. You can pick your battles, energy is not infinite. You could spend the time reading about training instead in your room, or some other interest.

I guess exercise enthusiasts would recommend keeping to your routine where possible, so maybe this is weighing on your mind and creating an internal conflict? I should go. You don’t have to live by that if you don’t want to though. It’s harder for you, make your own rules.

That being said I agree with the comment elsewhere that you could also try small bites of it. You could just visit the gym and stay for a minute or two, then leave. Next day try again. If it doesn’t get easier then maybe it’s not the gym for you, too bright. too loud, or something else maybe. That’s ok. If it doesn’t feel right trust that feeling.

Is there anyone who would go with you? A trusted friend who knows how difffcult this could be would be a great choice. Someone who understands if you need to leave suddenly, no questions.

Some gyms might have a changing area you could retreat to. Having a refuge can be useful. Maybe headphones/earbuds and a familiar song/voice would help too.

The Butterfield Diet Plan in all its glory for the curious:

https://www.youtube.com/watch?v=1NjTWvl8x-U&t=6

Sorry re-reading my comments it’s not super clear what I meant: nowhere else in the table do they take account for the ‘hidden’ on-going maintenance of looking after a server/self-hosting. So this is the only row where they address ‘cost’ and I just thought it’s a bit optimistic to say replacing all of Spotify just costs a one time server setup and storage. I think you’re saying this row was only meant to indicate financial cost and I agree it’s basically accurate from that meaning. However this is only the ‘initial’ cost. For example a self-hosted server and storage will eventually have to be replaced whereas Spotify will just keep replacing their own servers and that’s already baked into the price of your subscription (caveat: that Spotify price will rise over time).

It’s not a big point really, maybe I’m nitpicking.

I see what you’re saying but nowhere else in that table is cost mentioned. Below the table they say maintanance is minimal. If you’re already looking after storage, containers and server(s) I guess that could be true.

Author says “one-time server setup + storage” but there are a few moving parts and always updates to handle so I’m sceptical this could be truly called ‘one time’ (or any selfhosting). Time will tell I guess. I enjoyed the article though and gave me food for thought.

I have these:

https://zigbee.blakadder.com/Tuya_WSD500A.html

…use 2xaaa batteries. Accurate and reliable, got a bunch around the place.

Was this comment meant for a different conversation? We’re talking about VPNs here.

I’ve got probably 30+ households of people and multiply that by number of devices…this is also something that will only be live for 12 months maybe. I think if I was doing something long-lived it might be worth the effort to get everyone onto VPN but for this…just can’t justify the time. Thanks anyway.

Hey thanks for this. Yep I’ve got too many users and most are not technical so it’s just a huge headache to get them all onto VPN not matter how simple. That said I’d consider tailscale/funnel for other projects and it’s always good to hear what others are using.

👍 looks like its fairly easy to add something like ModSecurity WAF to nginx

Thought process is: Peertube or some other service’s first job is the purpose for the service, so security likely won’t be as good as a service who’s first job is security.

Really good point. I see many selfhost instructions now that say ‘we don’t bother with HTTPS, just use a proxy to handle that’ and maybe auth should go the same way as in there’s good solutions that specialise in auth so it’s not worth each project doing it themselves.

apps can’t deal with hitting Authentik 1st afaik

Another good consideration. There is an early Peertube app but I doubt my users will be using it, web access is fine for this. Perhaps apps for things like Lemmy/Mastodon/Peertube etc will need to work better with these auth frontends in future.

Thanks for this suggestion - this is interesting because it looks like pangolin combines almost all the measures mentioned so far here apart from Anubis: auth provider with one-time email passcodes, geoip blocking, crowdsec plus bonus automated cert handling. It does look like it does nearly everything in one package and I can pay for them to host it for me if I don’t want to selfhost those parts. Strong contender!

Really good point. I can definitely restrict to one country and anyone using their own VPNs/TOR/whatever will be sophisticated enough to understand why its restricted and how to keep their access.

Super useful thanks!

Good to hear Anubis is effective - I would hope that takes the site out of the ‘easy target’ sort of category and most bots give up. Yeah I think monitoring is gonna be key to keep an eye on threats. Thanks!

I had to look up NPM as in my head it’s NodeJS Package Manager but TIL there’s also Nginx Proxy Manager!

I like your VPN solution for a small group and actually tying it to their home network/router could make sense and further restrict attacks I have to deal with. However in my case I could be dealing with 30+ households of users and as others say I am bound to get people on mobiles complaining they can’t access it. However noted for future projects.

That’s a great suggestion, then I’m not relying just on the app/service to have super secure auth.