I really don’t think it’s the devs driving these decisions…

Add to that photo editing (as much as GIMP is great…). I would guess DAW and video editing would fall under that category, too…and good luck finding many AAA open source games.

Come see the vise grips inherent in the system! Help! Help! I’m being drill pressed!

I’m holding out for Aperture Science, if for no other reason than that their AI has a dry, dark sense of humor.

Just stick to elements lighter than iron and you’ll be fine.

Handy back-of-the-envelope is that a year is about pi*10^7 seconds.

Also…hate to be the guy to mention leap years but…

It’s mostly so that I can have SSL handled by nginx (and not per-service), and also for ease of hosting multiple services accessible via subdomains. So every service is its own subdomain.

Additionally, my internal network (as in, my physical LAN) does not have any port forwarding enabled — everything is over WireGuard to my VPS.

My method:

VPS with reverse proxy to my public facing services. This holds SSL certs, and communicates with home network through WireGuard link configured on my router.

Local computer with reverse proxy for all services. This also has SSL certs, and handles the same services as the VPS, so I can have local/LAN speeds. Additionally, it serves as a reverse proxy for all my private services, such as my router/switches/access point config pages, Jellyfin, etc.

No complaints, it mostly just works. I also have my router override DNS entries for my FQDN to resolve locally, so I use the same URL for accessing public services on my LAN.

The one I’ve heard replaces “brains” with “money.”

Nah, no hard feelings towards the retail folks, they’re doing what they’re supposed to. It’s just that I wish the corporate incentives were different so it felt more like the staff were trying to help.

My only complaint with microcenter is that the commission in incentives come off as extreme. Like I will be walking around with something in my hand and a rando will come up to me, say “hey there boss, lemme just slap this on that for you,” and proceed to put a sticker on it with their ID. Not a big deal, but palpable, and makes it harder to just browse.

Yeah, I get that people feel like they have so little control over their lives that they feel the need to generally be passive aggressive assholes to people they deem unworthy, but this is just an overall dick move. Having working public/municipal plumbing is a good thing.

Getting TLS certs will be complicated

I just use Let’s Encrypt with a wildcard domain — same certs for public and private facing domains. I’m sure this isn’t best practice, but it’s mostly just for me so I’m not too worried :)

Yeah I don’t expose Jellyfin over the Internet, so it doesn’t matter for me, and wouldn’t work at all over WAN (unless VPN’d to home network).

Also, it’s all reverse proxied, and there’s nothing preventing having two Jellyfin hostnames, e.g., jf-local.mydomain.com and jf-public.mydomain.com.

Another fun trick you can play is to use a private IP on your public DNS records. This is useful for Jellyfin on Chromecast for instance — it uses 8.8.8.8 for DNS lookup (and ignores your router settings), so it wants a fully qualified domain name. But it has no problem accessing local hosts, so long as it’s from 8.8.8.8’s record.

I have set up local DNS entries (with Pi-Hole) to point to my srrver, but I don’t know if it possible to get certs for that, since it is not a real domain.

So long as your certs are for your fully qualified domain there’s no problem. I do this, as do many people — mydoman.com is fully qualified, but on my own network I override the DNS to the local address. Not a problem at all — DNS is tied to the hostname, not the IP.

I think you need to include energy cost in the preparation stage. Bread requires a hot oven, which is a real amount of electricity — it’s close to $0.40/kWh where I live. From this link it says that a bread maker uses only .36kWh, but an electric oven would be more like 1.6kWh. So bakita single loaf of bread, you end up with a not insubstantial fraction of the total cost going to heating the oven.

Of course, many bulk foods require heat, so it gets a little sticky this way. Oats/oatmeal probably wins out here, as you can just soak them overnight.

I always say I have a 1969 Wayne Industries Batmobile. Usually a sheepish, “oh, um, we don’t cover that, sorry. click”

Any chance you have a DMZ set up on your router?

On your router, are there any settings specific to any host (other than the server maybe)? For example, a static IP or a port forwarded rule.

Do you have a VPN on the phones? Can you traceroute from your phone to the server and post that? (I like PingTools for Android.) You should have 1 hop (you -> server, nothing in between).

Can you verify that you are on the same wifi including same wifi channel? Phone on 5GHz but Linux box on 2.4GHz, for example.

Some mobile clients make it easy to accidentally downvote. I sometimes see that I accidentally downvoted a comment from time to time.