I haven’t checked the CORS headers for YouTube videos but wouldn’t access have to be fairly open to allow embedded videos to work?

MXroute are great. I switched to self-hosting my email server using Mailcow a few years ago, but still use MXroute for outbound email (meaning my SMTP server relays outbound email via MXroute). They’ve got deliverability figured out and have several fallbacks - I think if all of their outbound servers fail to send the email, they retry via Mailbaby and Mailchannels.

Forwarding is a decent approach too. Just note that it’s not 100% reliable (due to limitations around spam filtering) and you will sometimes have emails that get dropped.

On the web, it would not be possible.

Why not?

Gmail can be easily replaced, by like Proton mail or something

Except for the fact that you’ll need to update your email address in so many places.

If you do move to a different provider, make sure you use your own domain. It’s way more professional, and it lets you move to a different provider in the future without having to change your email address again. I’ve had one of my email addresses for a bit over 20 years across a bunch of different providers.

The paid version of Protonmail lets you have up to 3 custom domains. MXRoute and FastMail let you use your own domain too. MXRoute supports unlimited domains and addresses; you’re just limited by total disk space.

If the email address is important to you, it’s better to use a paid service since it’ll usually give you proper support and an SLA.

would there be any difference if the webpage has a JS button to put something in the clipboard, or it having code running in the background that puts things into the clipboard at page load?

Clicking a button shows user intent, whereas a page load doesn’t. No user expects loading a page to overwrite their clipboard, but every user that clicks a “Copy to Clipboard” button does expect it.

I’ve never heard of LoRa. The marketing and whitepapers for HaLow specifically mention the things I did, for example https://www.wi-fi.org/discover-wi-fi/wi-fi-certified-halow

Not sure what you mean by “controlled” given it’s open-source?

That’s pretty good given (as far as I know) the main use case for HaLow is for low bandwidth, very low power use cases, like for IoT devices and other things you’d use Zigbee or Z-wave for today, including devices that run for years off a single button cell battery

At least back then, snaps wouldn’t work if the home folders were not under /home/<username>,

Do you mean that it literally had /home/ hard-coded instead of using $HOME? That’s crazy if so.

Which OS?

On Android, Moon+ Reader is pretty good.

My wife uses the Amazon Kindle app on her Android tablet. You can use it for non-Kindle books by sending an email to a special email address for your Kindle account: https://www.amazon.com/sendtokindle/email.

Calibre is useful for this. It shows an easy to use “send to Kindle” button, and can convert books in ePub, mobi, etc formats to the format that works best in the Kindle app (AZW3).

If you want a web interface for Calibre (eg to run on a home server and download books when you’re away from your computer), Calibre-web works well.

But why deal with separate software like dnscrypt-proxy when AdGuard Home has it built-in?

A recursive DNS server and a local DNS cache/forwarder/are two different things with two different purposes. You will always need both.

Why do you need two separate ones though? Recursive DNS servers also cache responses. Usually the only reason you’d run a local forwarder/cache is if you’re not running a local recursive server.

Yeah it’ll use the local copy if it exists.

I use a wildcard cert in some places, but most of them are individual certs. You can have multiple ACME DNS challenges on a single domain, for example _acme-challenge.first.int.example.com and _acme-challenge.second.int.example.com for first.int.example.com and second.int.example.com respectively.

The DNS challenge just makes you create a TXT record at that _acme-challenge subdomain. Let’s Encrypt follows CNAMES and supports IPv6-only DNS servers, so I’m using some software called “acme-dns” to run a DNS server specifically for ACME DNS challenges. It’s just listening on a IPv6 in one of my VPS /64 IPv6 range.

IMO it’s easiest to just use a real domain for your local network. For example, I use subdomains of int.example.com, where example.com is my blog.

Then, you can get Let’s Encrypt or ZeroSSL certificates for all the hosts. Systems do not need to be accessible over the internet - you can use an ACME DNS challenge instead of a HTTP one. Use something like certbot or acme.sh and renewals will be automated.

Only cost is for the domain, and some TLDs are less than $5/year. Check tld-list.com and sort by renewal price, not registration price (as some are only cheap for the first year).

Yeah this is strange. People need to stop vilifying sex work. If the person is doing it willingly, they’re not hurting anyone, and they enjoy doing it, what’s the problem?

I have Plexamp on my phone configured to automatically download the “loved” album (songs I’ve rated 4 or 5 stars). It automatically downloads songs I add to the playlist. My library is too big to download it all to my phone (most songs are in FLAC format) so I’d need to download a curated list anyways.

This seems to work well. I’ve used it a few times on flights or when I’m in a hotel room with spotty phone coverage and no wifi.

Hot take: If you don’t like ads, then don’t use services/sites that are funded by ads?

Throw Unbound on there too as your upstream recursive resolver

If you want to run your own recursive DNS server, why would you run two separate DNS servers?

You don’t even need to worry about an encrypted session to your upstream anymore because your upstream is now your loopback.

Your outbound queries will still be unencrypted, so your ISP can still log them and create an advertising profile based on them. One of the main points of DoH and DoT is to avoid that, so you’ll want them to be encrypted at least until they leave your ISP’s network.