Immutable Nixos. My entire server deployment from partitioning to config is stored in git on all my machines.

Every time I boot all runtime changes are “wiped”, which is really just BTRFS subvolume swapping.

Persistence is possible, but I’m forced to deal with it otherwise it will get wiped on boot.

I use LVM for mirrored volumes for local redundancy.

My persisted volumes are backed up automatically to B2 Backblaze using rclone. I don’t backup everything. Stuff I can download again are skipped for example. I don’t have anything currently that requires putting a process in “maint mode” like a database getting corrupt if I backup while its being written to. When I did, I’d either script gracefully shutting down the process or use any export functionality if the process supported it.

I haven’t tested in Windows, but this is my setup Linux to Linux using rclone which the docs say works with Windows.

Server

• LUKS
• LVM
• Volgroup with a mishmash of drives in a mirror configuration
• Cache volume with SSD
• BTRFS /w Snapshots (or ZFS or any other snapshotting FS)
• (optional) Rclone local “remote” with Crypt if you want runtime encryption at rest and the ability to decrypt files on the server. You can skip this and do client side only if you don’t want the decryption key on the server.
• SFTP (or any other self-hosted protocol from https://rclone.org/docs/)

Client

• Rclone Config /w SFTP (or chosen protocol)
• (optional) Rclone Config /w Crypt
• Rclone mount with VFS.

I use this setup for my local files and a similar setup to my Backblaze B2 off site backups.

The VFS implementation has been pretty good. You can also manually sync. Their bisync I don’t fully trust though.

I can access everything through android using https://github.com/newhinton/Round-Sync. Not great for photos though as thumbnails weren’t loading without pulling the whole file last I tested a year ago.

Hotline for the MacOS warez scene to get games in high school (circa 1999ish).

I accidentally pirate crap I have legitimate access to because I can’t be bothered to figure out which damn platform its on. I have access to quite a few through work due to my industry at no out of pocket costs.

The times I try to actually search for something, it’ll be listed on multiple platforms but 0 to 1 of those platforms will actually have what I’m looking for included with the subscription forcing me to manually check each one.

It is easier to just pirate.

When a measure becomes a target, it ceases to be a good measure.

• Goodhart’s law

Advertisers made it a target to have a high review score so now they are just another advertising cost.

SEO did the same to the web.

Bots and now AI are infecting social spaces as users figured out reviews are now shit and would turn to special interest groups.

And track this stuff in git so you don’t need to remember how you did it when you inevitably forget, lol.

One method depends on your storage provider. Rsync may have incremental snapshots, but I haven’t looked because my storage provider has it.

Sometimes a separate tool like rsnapshot (but probably not rsnapshot itself as I dont think its hard links interact well with rsync) might be used to manage snapshots locally that are then rsynced.

On to storage providers or back ends. I use B2 Backblaze configured to never delete. When a file changes it uploads the new version and renames the old version with a timestamp and hides it. Rsync has tools to recover the old file versions or delete any history. Again, it only uploads the changed files so its not full snapshots.

Yes. You compose a crypted vault over your storage vault. I pay about $1/mo for B2 Backblaze. Around 150G last I checked.

Important stuff (about 150G) is synced to all my machines and a b2 Backblaze bucket.

I have a rented seed box for those low seeder torrents.

The stuff I can download again is only on a mirrored lvm pool with an lvmcache. I don’t have any redundancy for my monerod data which is on an nvme.

I’m moving towards an immutable OS with 30 days of snapshots. While not the main reason, it does push one to practicing better sync habits.

I believe you will see OOM errors in journalctl. Also considered a systemd service or something to restart the process?

Glad you figured it out though!

I use EteSync to sync my contacts. It can do calendars also and has a self-hosted option. Personally I just use Proton for my calendar at the moment.

I haven’t tested any desktop syncing with EteSync, but maybe it will work for you.

I use DavMail to proxy an Exchange account so I don’t have to install Outlook on my phone.

I use Mullvad and Proton. I have a grandfathered Proton Ultimate Visionary plan so I use theirs when I need the port forwarding. I had just started my privacy journey with Proton and didn’t sign up anonymously. Mullvad is my daily driver paid with XMR.

If the curriculum format teaches students to be test takers, I’d give them extra points for working smarter.

If my job gave me work while on my vacation, I’d be talking to the labor board if they didn’t pay me at my consultation rates.

https://kycnot.me/?t=&q=vps&xmr=on

I use an OnlyKey and Mooltipass interchangeably. Prefer the lower tech OnlyKey. My passwords are half memorized passphrase and half random characters on the device. Only use for disk encryption, main account, and password manager.

I pay $4.99/mo. Also have the data eSim (rarely use as its a backup). Don’t use auto-top up as I pay with XMR.

The bot has a transaction ledger. Did you inspect it?

Disk encryption, computer login, and password manager are pass phrase + random characters stored on a pin protected OnlyKey and/or Mooltipass.

Regular passwords are just random characters up to min(max_len, 128).

As another poster said, the underlying tech is not private: https://jmp.chat/privacy

For backwards compatibility, what your proposing is unlikely unless driven through regulation (personal opinion).

Use something over the top (like Signal was suggested), use a non-KYC provider (like Jmp), or use a burner phone.

A non-KYC provider I wouldn’t trust to be private personally, especially as a secondary SIM. Maybe slightly above average (the company can’t sell the number attached to my name), but I’m sure enough information leaks that a state-level actor could correlate the device to me. The IMEI the tower gets is probably enough to run to Google to figure out who bought the phone.

Even burners may trace back to you through GPS or triangulation depending on how private you really want to be.

It is. I run a virtual camera for blurred backgrounds that logs when clients connect and noticed one of my web conferencing type apps like to take a photo ever second. Haven’t taken time to investigate which (likely candidates: slack, zoom, webex, discord).