I’m already building a custom image of Caddy with plugins for Crowdsec integration. It’s not hard to do. But I have no reason to use anything other than the default Let’s Encrypt setup.

Everyone in here taking about an the automations they’ve done for certs and I just use Caddy. It handles all that for me.

You’re not doing a good job of communicating what your issue is. None of this makes sense.

You don’t have to use HAOS. You absolutely can just run HA in a container.

You say. Confidently. With no receipts.

I just recently went through a much more benign, but scary nonetheless version of this.

I realized that my Ansible directory, that I had made public on GitHub to share as an example to some folks, had secrets committed and pushed.

It was the direct URL and credentials of an app I developed to store non-PII customer data. Now, it wouldn’t be the end of the world if someone noticed this and scraped the data, but it wouldn’t be good, either.

Luckily, I have Caddy access logs, and it appears no one ever accessed it.

So I pulled the secrets out of the Ansible directory and made the repo private, I rotated the credentials, and installed Crowdsec to monitor Caddy access logs and ban bad actors.

I only noticed the secrets because I had just setup Authelia as an OAuth2 provider for my homelab, and I was adding it to my backup scripts.

Bazzite/Bluefin/Aurora do all updates in the background. Flatpak and Brew as well.

So all you have to do is restart your computer on a regular basis and everything just works.

It’s what make them nice for people who use their computers like a Chromebook.

I was devastated when Google Reader shut down. I switched to another service after that and it shut down not long after that. Maybe a year or so.

I would have paid for that service at the time.

Being immutable means you have fewer options for building out specialized hardware support.

With Distrobox you can install any Linux software you could on any other distro. Immutable isn’t the hurdle people make it out to be. It’s just different than what people have been used to for so long.

Regarding certificates. I use Caddy for things like that. Even stuff that I don’t want publicly available. It is technically public, but relatively secure.

I use a combination of basic authentication plus a rate limit so the password cannot be brute forced. And then I have a bypass so that auth is not required on my home network. I think it works pretty well.

Those people were delusional. I have no need for a Stream Machine, nor the spare funds. But I still knew it would sell just fine because the market is absolutely fucked.

Try Bazzite. You can get it with GNOME.

Their documentation says Debian is supported.

Look, I get it, you really want to pay the game. But if it’s a game that might die due to low player count, why bother?

I see two main outcomes: 1) it’s amazing and you have such a great time playing it that you’re extremely sad when it dies, or 2) it’s just a game, you play it for and while and it’s no more fun than any other game you have.

FOMO and hype are extremely effective, but not for your benefit.