Numeric .xyz domains only cost $1 a year. They’re not great for things like mail because they’re often used by spammers (probably because of the price), but it’s great for cheap signed DNS hostnames.

I point it to the server on my local network and use Wireguard to connect myself.

Wifi networks may add popup pages by man in the middeling connections to unsecured sites. However, it’s very uncommon to see an unsecured site and people therefore won’t see the popup which grants them access after agreeing to the terms of use of the network.

Oh yeah, I forgot about TPM 2.0 and was just thinking about POPCNT etc.

Windows required CPU’s to have certain extensions/instructions to use the newest version, which might have required buying a new CPU and thus getting one of the affected ones. However, I don’t think it’s reasonable to blame Microsoft for this.

I would pay extra to be able to run open LLM’s locally on Linux. I wouldn’t pay for Microsoft’s Copilot stuff that’s shoehorned into every interface imaginable while also causing privacy and security issues. The context matters.

Exactly, proton was much more usefull

Thank you for the very detailed response

I also use this and can recommend it

I didn’t know that, could you give an example?

It’s a mobile app for server monitoring that doesn’t require installations on the server.

Also, is this tone really necessary?

The server-side software is optional and only for push notifications and home screen widgets

Yes, plain text was more of an analogy

It’s E2EE therefore you can’t just use an IMAP server that works with “plaintext” data.

Yes, it seems to be a hit or a miss. I don’t think I live near any central infrastructure or ISP, especially not this specific part of the city.

No, I’m currently using Tailscale but have been considering switching to Netbird to not be reliant on Tailscale.

he specified static website, which rules out WP

Oops missed that

EDIT: And I missed Immich too

You don’t have to be successful to get hit by bots scanning for known vulnerabilities in common software (e.g. Wordpress), but OP won’t have to worry about that if they keep everything up to date. However, this is also necessary when renting a VPN from said centralised services.

You can simply set up a VPN for your home network (e.g. Tailscale, Netbird, Headscale, etc.) and you won’t have to worry about attacks. Public services require a little more work, you will need to rely on a service from a company, either a tunnel (e.g. Tailscale funnel) or a VPS.

Ip address doesn’t expose where you live.

https://letmegooglethat.com/?q=geoip+lookup

Tunnels stop you from opening a port so nothing is exposed openly to the internet¹ but it does not keep your ip private².

This is also incorrect.

1. The entire purpose of CF tunnels is to expose sites on the internet
2. CF tunnels (and services like it e.g. ngrok) rely on shared proxy servers that forward traffic based on HTTP host headers (which is why you can’t forward arbitrary TCP traffic). The IP of the site will therefore have the shared IP of the company’s proxy server instead of your own.

This is false. Some ISP’s change IP’s often, but some don’t and sometimes geoip lookups can be really accurate. My IP has remained the same since I moved in, and a geoip lookup results in a coordinate less than a kilometer away. It does matter.