pound_heap

I'm running one Pi-hole, but not on RPi. One is an LXC container on my Proxmox host, another is on dedicated Dell Wyse thin client box.

Maybe this is a protection for a situation when you are at your home under the gun point, but they still let you answer the phone and order you to "act normally". Sounds like something from a movie, but maybe this happens in real life too.

I think the main intention here is to block the bots. Reddit blocks requests coming from certain IPs associated with VPS and similar commercial providers. VPN services often rent exit servers there. My connection is blocked when it goes through Tailscale exit node hosted on a VPS.

You can use Tor to browse Reddit anonymously, there is even a .onion address

This is great, thanks for sharing! You've got a few useful feedback points, let me add one more: does a provider have an onion address. This allows decoupling of payment from usage. Not a big thing, but good to know.

I vaguely remember some issues with extensions in ungoogled chromium. Maybe I should give it another shot.

People are free to whore out themselves

Depends on what you mean by "private". I would not trust it much, but it's not a bad Chromium based browser when you need one. Use something like LibreWolf for much more privacy out of the box.

It's been my obsession for a while! It even starts to feel like a disorder sometimes as I'm struggling to find an ideal solution...

I ended up centralizing my most important data (family media files and personal documents) in Nextcloud. This data is backed up with Duplicacy - 1 copy to local NAS and another to Wasabi S3 bucket.

I also use Duplicacy to backup various Docker volumes of the stuff I run at home and my main PC home directory.

Apart from that, I use Time Machine for Macs with an SMB share on NAS. And Proxmox Backup Server backs up everything which is not in Docker to another NAS share. These backups are replicated with HyperBackup (Synology app) to Wasabi S3.

An outdoor WiFi access point would help with garden coverage

Okay, thanks! I think I should try it then

I probably don't know enough about sandboxing in GrapheneOS. So if you do that, you still have to log in with Google account, but Google will be able to only see what you are doing with play store apps? And the rest of data like sensors, file system, other apps, will not be visible to Play Services?

I've been thinking about this for a while. I have Pixel 7, so GrapheneOS is an easy choice. But I have a few paid subscription apps via Play Store, and I don't want to get rid of them... Maybe I could ditch some, but not all.