Rotating passwords only for web services. Vaultwarden does make it easy. Not all services allow 2FA.

I’m somewhat paranoid therefore running several isolated servers. And it’s still not bulletproof and will never be!

• only the isolated server, ie. no internet access, can fetch data from the other servers but not vice versa.
• SSH access key based only
• Firewall dropping all but non-standard ports on dedicated subnets
• Fail2ban drops after 2 attempts
• Password length min 24 characters, 2FA, password rotation every 6 months
• Guest network for friends, can’t access any internal subnet
• Reverse proxy (https;443 port only)
• Any service is accessed by a non-privileged user
• Isolated docker services/databases and dedicated docker networks
• every drive + system Luks-encrypted w/ passphrase only
• Dedicated server for home automation only
• Dedicated server for docker services and reverse proxy only
• Isolated data/backup server sharing data to a tv box and audio system without network access via nfs
• Offsite data/backup server via SSH tunnel hosted by a friend

I can recommend mopidy and snapcast.
This will allow for a Sonos like setup you are looking for.

If I'm understanding you correctly, you could make use of a shell script for this. Use WGET to download lists, then combine them into a single large file, and finally create a new file with no duplicates by using “awk '!visited[$0]++'”

wget URL1 URL2 URL3
cat *.txt > all.txt (This overwrites all.txt)
awk '!visited[$0]++' all.txt > no_duplicates.txt

It depends a bit on what you want to accomplish, the threat model, the devices in use, and other topics. I think this is a good read: https://avoidthehack.com/best-pihole-blocklists

Some specific social blocklists: https://github.com/d43m0nhLInt3r/socialblocklists

https://www.home-assistant.io

Possibly Home Assistant is able to cover your devices and needs.

Guessing, millions of people will feel obligated to share their ID. Not everyone can be saved

Original link:

https://technomagnus.vercel.app/posts/ultimate-privacy-list/

If you want regular automatic hdd checks and don’t need a WebUI I recommend https://github.com/smartmontools

I set up custom bash scripts collecting information (df, docker json, smartCTL etc) Either parse existing json info or assemble json strings and push it to Homeassistant REST api (cron) In Homeassistant data is turned into sensors and displayed. HA sends messages of sensors fail.
Info served in HA:

• HDD/SSD (size, smartCTL errors, spin up/down, temperature etc)
• Availability/health of docker services
• CPU usage/RAM/temperature
• Network interface/throughput/speed/connections
• fail2ban jails

Trying to keep my servers as barebones as possible. Additional services/apps put strain on CPU/RAM etc. Found out most of data necessary for monitoring is either available (docker json, smartCTL json) or can be easily caught, e.g.

df -Pht ext4 | tail -n +2 | awk '{ print $1}

It was fun learning and defining what must be monitored or not, and building a custom interface in HA.

Had for years airsonic, later airsonic advanced. The overhead is huge compared to Navidrome.
Had never an issue with Navidrome and it is much snappier. No even starting to talk about the modern interface compared to Airsonic.

beets music library management and tagging for geeks