With nextcloud in particular, nextcloud is not just nextcloud.

It’s a bunch of additional optional services that may or may not work as-is on Synology. And the Synology package won’t come with all of them.

With docker, adding (or removing) additional services, such as Nextcloud Office, is comparatively simple.

I use this one professionally, yet to come across a PC that wouldn’t boot from it.

And yeah, you won’t benefit unless the PC also has both fast ports and fast storage.

But half of the time I’m using it to move files from a customers old PC to their new one, and more aften than not, even the old one has at least one quick usb C port.

Sure.

But that’s limited to SATA 3 speeds. A “mere” 600 MB/s. Not to mention SATA SSDs often can’t sustain their theoretical maximums.

USB3.2x2 can do 2500 MB/s, and with heatsinks on an NVME drive you can actually reach and sustain that transfer speed.

When you’re moving more than 500 gigs of something, or if you move ISO sized things often, it’s really nice.

When I occasionally have to write an ISO to usb for macOS or when ventoy for some reason wont work, I get annoyed at how I actually have to wait a bit, even though my thumbdrives aren’t slow.

They’re just not NVME with a heatsink fast. I’ve gotten used to moving ISOs around like they’re text files.

True. But if you have an old one laying around, from a laptop, desktop or whatever, even a low end one will saturate usb while beating 2.5" hdds.

Or if you want to install an entire iso in less than a minute, one of these.

I really like that one. I can move a terabyte in minutes, and unlike some other M.2 enclosures, this one is a heatsink sandwich, which enables sustained full-speed operation.

ZoneMinder?

There is also an actual Jellyfin Rewind though you do need to have been using the playback reporting plugin.

This years isn’t done yet.

In that case, something in is invalidating the login. Are you sure that it is happening due to leaving your LAN, and not just coinciding with that?

Does restarting the laptop log you out, or temporarily disconnecting from the internet? Could you test by switching to a wifi hotspot on your phone, and switching back, for example?

The client stores your session token in the OS credentials manager (kwallet for linux kde, for example) and the issue can lie there, as well.

That’s definitely not how it should work. Leaving your LAN should not invalidate a session.

Is this in your browser, or are you talking about the desktop client?

Flathub and the AUR are by far the most comprehensive, and flatpaks works on a lot of distros. So I checked those.

They’ve also been getting their kinks worked out over the last few years and work much better than they used to.

That review you found is two years old and was for version 1.1. Current version is 1.4. Try it out today, if it’s been fixed leave another review letting people know. It seems to work just fine for me.

Material Maker is on Flathub, the AUR, and on Snapcraft (not up to date, but you shouldn’t use snap anyway).

No need for a manual install.

You’ll find a lot of software is available via package managers. Linux people don’t like installing anything without it being managed by a package manager so the installation and subsequent updates are automatic and occur alongside system updates. So when people find software they like, they’ll go out of their way to package and distribute it for others as well

Yes. But you didn’t.

Knowing what something does is important.

If you install a piece of software expecting it to do something it actually doesn’t, that can leave a security gap.

I wasn’t just correcting you. I was making sure you knew that if you install a “firewall” it won’t do the thing you’re looking for.

As for an actual answer, most distros will already ask you to confirm if you try to run a random appimage you downloaded.

But you shouldn’t need to do that in the first place. On linux, there’s not really any need to go running random programs downloaded using your web browser, since you can just download software from trusted reposotories that aren’t going to host malware to begin with.

Unlike on windows… You don’t need to risk it in the first place.

And I’m telling you a firewall won’t do that.

It won’t have anything to say at all about something you download and run.

It’s a completely different security feature. It handles potentially malicious network activity. Not software on your computer.

It’s not federated tho?

What do they mean when they call it that?

oh with the firewall saving me from myself I meant if I download something thinking it’s safe but isn’t

A firewall would not save you from that.

A firewall stops random incoming connections. But if you download and run something bad, that’d be an outgoing connection, since the malicious program is then already on your system.

Almost everything you do on desktop linux is already “outside the core os”.

This is mostly relevant for server software configuration, where you should run services with as few system privileges as possible. Preferably you isolate them entirely with a separate user with access to only the bare minimum it needs.

This way, if a service is compromised, it can’t be used to access the core system, because it never had such access in the first place. Only what it needed to do its own thing.

By default, nothing you run (web browser, steam, spotify, whatever) should be “running as admin”.

The only time you’ll do that on desktop linux, is when doing stuff that requires it. Such as installing a new app, or updating the system. Stuff that modifies the core os and hence needs access.

Basically, unless you needed to enter you password to run something, then it’s already “outside” the core os.

Oh good. Mobile github just not showing everthing again.

It doesn’t have a license yet.

So very much WIP on the way to becoming FOSS.

That’s the one.

I also need to work out how to do automatic certificate renewal and if that’s even worth doing

This is what certbot is for. For example, with nginx, you just set up the webserver to be reachable via your domain.

You then install and run certbot, and it will aquire, install and configure, and then set itself up to auto-renew, a certificate. All with just one command.

With Nextcloud specifically I also don’t like the fact that you can’t change the domain after the initial setup

Yes you can?

I’ve done it thrice now.

Is this some limitation of the docker AIO stack?