WxFisch

So the plan is to request an early ballot, then to take it to your polling place and assume the poll workers won’t follow the process and then you’ll take a picture of your early ballot to somehow own the libs? At least in PA the poll worker will just have you relinquish the unmarked early ballot and then you’ll vote as normal. If you don’t have your ballot then you vote a provisional ballot that is only counted once it’s confirmed your early ballot wasn’t returned. It’s not a hard thing and it’s well understood by poll workers on what to do.

For me as the driver of not one of these cars, I think the driver monitoring and sheeting is perhaps one of the most important parts of these systems. I 100% want your car to scream at you for not paying attention while use the driver assist features because it’s such a common and easy thing to do (if it works 99 times without issues, human nature is to assume it will work that 100th time, so checking that email from work real quick is probably fine). When the consequences of a driver failing to post attention while using these systems is potentially other people dying in a horrific crash, your discomfort at an alert because you happen to be a perfect driver that never does other things in the car while driving doesn’t matter.

The reality is they may not know exactly what was obtained, but they do know it wasn’t anything they don’t collect (like DOB, SSN, etc listed in the message). Instead of looking at this purely as a CYA message, instead looking at it as informing you as soon as they had any idea your information may have been impacted instead of waiting weeks/months to inform you. Don’t let perfect be the enemy of good.

I would recommend prowlarr instead of jackett for indexer management, and pihole as at least an additional blocking service but in reality it’s really all you need for use at home. I’d also strongly encourage use of a VPN on your *arr download services. I use a separate box to run Plex and then have my *arrs all running on their own VM inside if it to provide separation and allow be to more easily segregate the network traffic (as someone that doesn’t really know docker that well it “just works” for me. Also probably worth looking at how to store your media on an external target, it’s easy to quickly accumulate 10s of TBs of media and trying to store that all on the server locally is asking for trouble. Better to set everything up on a NAS to start.

Asking broadly like this is akin to asking for a guide on how to cook, it’s generally too broad for there to be a single guide. You first need to figure out what your goals are (you state one already, you’d like it to be externally accessible), determine what services you want to host, and then start looking at how to do so.

The advice I’d give is to start with a solid base, you’ll need something to self host on and it really shouldn’t be the PC you use for other things. Get it setup to run a virtualization OS such as proxmox and use that as your starting point. Then do a lot of reading. I spend probably three to four times as much time reading about the service I’m planning to deploy compared to actually doing the work to deploy it. Lastly, plan. You should have a solid plan in the beginning of how you want your service to work (what will be external vice internal only, how will you setup the networking stack to do that, are you going to have a domain, and will you use subdomains or folders to divide services, what does your IP space look like, will you host your own firewall to make the networking more controlled or fight with your ISPs router, do you want to use docker, kubernetes, or maybe full VMs for each service, do you want/need a UI to manage things from or are you comfortable with CLI, etc). These answers will lead you to guides for various services as well as service specific forums where help is more focused.

I use protonmail with their family plan, it’s not terribly priced when you consider it comes with calendar, vpn, and drive storage as well. The biggest annoyance is probably that you have to use their mobile apps due to the encryption and they are not the greatest, but it does encrypt everything which I find outweighs the forced use of just their app.

Curious about the ears you have on your 8 port POE switch; I’d love to rack mount mine and get it off my “other stuff” shelf. Are they from UI? Or did you repurpose some from something else?

So you never apply patches or updates, that seems like an odd thing to be proud of but different strokes for different folks I guess.

Backblaze B2. Any software that is S3 compatible can use B2 as the target and it’s reasonably priced for the service. I backup all the PCs and services to a Synology NAS and then backup that to B2 (everything except my Plex media, that would be pricy and it’s easy enough to re-rip from disc if needed).

The problem I have is there is no way to playback live tv on AppleTV which is what we use throughout our home. Plex just works and has wife approved first party apps for pretty much everything.

This is pretty much it, Plex offers far more client apps that are full featured and they make it super easy to setup and use both as an admin and a user. Especially for things like OTA TV where they provide the guide data once it’s setup (which is why it’s a paid option). I’d move to JellyFin in a heartbeat if they’d support OTA and DVR playback on AppleTV.

In most companies I’ve worked for, T1 is there to put in tickets from calls, and handle the simplest of tasks (password resets, account lockouts, “have you tried turning it off and on again” tasks). Anything beyond that is generally sent to T2 (usually the desktop team who then force other teams to accept tickets as needed) and T3 for anything that more systemic or needs deeper troubleshooting and system knowledge.

In many places it’s a combination of piss poor pay creating little motivation and high turnover (and thus lack of training) and management prioritizing the wrong metrics (generally looking for short call times and short call queues). If you want to try and improve things I’d suggest learning about the KPIs that team is expected to meet, and then ask management why they chose those metrics. Generally I’ve found prioritizing first call resolution over call times to be a huge improvement to motivation of the team and user satisfaction scores (we all like solving problems and users tend to be way nicer when you fix the issue vice kick the can).

I would say, at least to your point about them not having access to systems, that’s it’s very common for T1 to have pretty limited admin access to systems. Partly to protect against inexperience, but also as a social engineering protection. If they need to ask for access to pass a ticket for elevated rights, it gets another set of eyes on the call to ensure it’s all kosher.

I also have a decent amount of video data for Plex (not nearly 50TB, but more than I want I pay to backup). I figure if worst comes to worst I can rip DVD/BluRays again (though I’d rather not) so I only backup file storage from my NAS that my laptops and desktop backup to. It’s just not worth the cost to backup data that’s fairly easy to replace.

I also recommend B2, it’s an S3 compatible service so any backup software/scripts/plugins that work with S3 should work with Backblaze.

Honestly I don’t really know. I don’t think it has to be but you’ll need to research what kind of certs you’ll need for your purposes and what options exists for a CA.

My overall point was more that this isn’t really a “just setup Apache” web service, it’s a fair bit more involved since your looking for (I’m assuming) legally valid digital signatures which means they need to be secure, unique, identifiable, and adhere to non-repudiation. Services like DocuSign do all of that work already so unless you truly want open source because of passion or principles, this isn’t really a great area to try and roll your own without some experience and expertise.

Anything you use will need to generate secure certs for each user that signs which will need to be tied back to a root CA that is trusted by the clients device they are reading the signed documents on. Are you open to hosting all of the needed pieces to keep that working including buying the needed certs to chain trust?

deleted by creator

If jellyfin could record and playback OTA TV on my Apple TV I’d switch tomorrow, but it seems the team is either unable to or unwilling to work on that feature which is core to how my household uses Plex. The only maybe solution is Infuse which is paid and closed source so is no better really than using Plex in that regard.

Like most things in the world, your use case is not the only use case and as such a solution that checks all the boxes for you will not check all the boxes for everyone.