Meanwhile the whole marketplace they’re standing in is run on Linux servers

I never claimed it would make security better. I said it would reduce noise, and it does.

Good luck getting e.g. Ansible to work with that. At that point I’d just switch to a hosting provider with an actual firewall.

If you have a public IPv4 address and use port 22, you’ll see lots of login attempts. I wouldn’t worry about it, given that you’ve disabled password login. The only thing I would advise is to disable root login as well (if not done already). Edit: Just saw you’ve already disabled root login.

If you’d like to reduce the noise somewhat, consider changing to a randomly chosen high port. I’ve done this with my VPS and hardly get any login attempts.

The docs on DNS challenge are here, and a bit further down you can find the ones on wildcard certificates

I tried using zsh again after having used fish for a while, but I just couldn’t do it. Trying to configure the ergonomics that fish ships OOTB into zsh was a pain, and I couldn’t get it to a satisfactory level.

Regarding scripts, you don’t have to use the fish scripting language. Just keep writing your scripts in Bash, and as long as you use a shebang, it’ll work fine in fish.

+1 for Podman. I’ve found rootful Podman Quadlets to be a very nice alternative to Docker Compose, especially if you’re using systemd anyway for timers, services, etc.

If you also use FreshRSS, you can configure filters to automatically mark new articles as read (e.g. intitle:'beta'). Since I only view unread articles, that effectively deletes them and I never have to see them!

We have yet to see if they’ll stick to the Rust implementations for 26.04. If you’re running non-LTS Ubuntu in prod, that’s not on Canonical…

If we expect software like sudo to stick around for decades to come, a transition phase like this might very well be worth the investment.

Definitely, that’s what I’m doing as well. I’ve found some to be lacking for my needs (e.g. music), but most of them are good enough for most use cases.

I’m using Nextcloud as well, but I’ll admit that it’s probably a bit heavy if all one needs is a calendar.

What’s the problem with that? In my previous team, we had a structure with four levels of nesting where we only ever needed to query the first two levels. At first we used Postgres with normalized tables, but it was just slow as hell. Switching to MongoDB actually made our performance issues vanish.

Of course it all depends on what kinds of queries you need to run, but I don’t think that large JSON documents are necessarily a problem.

As much as I agree, I think we’re past the point of preventing normalization.

I also prefer windowless basements

OP acting like this is OwlsGoneWild

Deleted the test suite since it was failing

You still have 63% RAM available in that screenshot, there are zero problems with Java using 13% RAM. It’s the same as the tired old trope of “ChRoMe Is EaTiNg My MeMoRy”. Unused memory is wasted memory if it can be used for caching instead, so unless you’re running out of available memory, there is no problem.

Also, the JVM has a lot of options for configuring its various caches as well as when it allocates or releases memory. Maybe take a look at that first.

Edit: Apparently people don’t want to hear this but don’t have any actual arguments to reply with. Sorry to ruin your “JaVa BaD” party.

I use Backblaze B2 for one offsite backup in “the cloud” and have two local HDDs. Using restic with rclone as storage interface, the whole thing is pretty easy.

A cronjob makes daily backups to B2, and once per month I copy the most current snapshot from B2 to my two local HDDs.

I have one planned improvement: Since my server needs programmatic access to B2, malware on it could wipe both the server and B2, leaving me with the potentially one-month old local backups. Therefore I want to run a Raspberry Pi at my parents’ place that mirrors the B2 repository daily but is basically air-gapped from the server. Should the B2 repository be wiped, the Raspberry Pi would still retain its snapshots.

See, they want you to believe that SQL stands for Structured Query Language. But I know from our lord and savior Elon that it actually means Socialist Queer Liberals!

That doesn’t mean anything. If you have tons of free RAM, programs tend to use more than strictly necessary because it speeds things up. That doesn’t mean they won’t run perfectly fine with 8GiB as well.