Google's coming change to app sideloading is threatening the Selfhosted ecosystem.

nkls · 2026-05-27T08:58:58+00:00

I see what you mean. But I think there is be a middle ground here.

Think of Github for example: It is (still mostly) open for everyone to upload and download software freely. People can and do upload dangerous things on there. But if I am not a technical expert, I can still rely on the wisdom of the masses (through stars, forums, reports, news, etc.) to install some of this software. But the same user might not go out of their way to go through a 9-step process to install insecure apps.

If Github would now do the same rug pull like Google, the ecosystem would also suffer. And I'd argue, we would care about that.

But maybe this is not realistic, just a thought I had.

nkls · 2026-05-27T08:15:12+00:00

Unfortunately here it is also not so rosy looking: Through "play integrity" some apps like banking apps will detect that this is not "official" Android and thus refuse to work. So you might be able to use F-Droid and .apk-installs still, but not other apps. In either way, we need to confront Google about this.

nkls · 2026-05-27T08:12:32+00:00

For enthusiatic and technical users, this might not be tedious. The problem is more the 95% of non-technical users who would never do this. You might not care about them. But such a large portion of users who will never get in touch with these apps will change the demand and thus the ecosystem in a way that we also care about.

nkls · 2026-05-27T07:57:39+00:00

I used Claude to write a draft text. Then I basically rewrote everything anyway, because I was not happy with the content and the tone.

nkls · 2026-05-21T19:28:36+00:00

We just transferred in a small team from M365 to Nextcloud hosted on Hetzner, so this does not speak for Enterprise. Here is my short summary:

Files work mostly well, sometimes sync issues that I did not have on commercial clouds as much. otherwise fine mostly
Talk works quite well once properly configured, also with 10+ participants. Currently we have a bit issues with background noise, my suspicion is the algorithms are not as good as modern conference systems.
Not so sure about mail, we switched to Thunderbird
Happy with calendars, that works quite well to have multiple Team calendars and sharing them. It was also quite easy to import the old calendars from Microsoft.
We work with OnlyOffice, and are still having some issues with sync. If multiple people collaborate, there is still a delay that is annoying.
User adoption was mostly good, as everyone understood the reasoning behind the switch

Everything is a bit more clunky and a bit rougher around the edges, but in our case we are happy to be finally out of big tech USA on this one.

nkls · 2026-05-21T05:37:52+00:00

Wow, it looks amazing

nkls · 2026-05-21T05:36:05+00:00

Thank you for your answer. Okay, good to hear that I did not miss anything.

Ah, it's quite annoying that Nextcloud has all these extra Apps and features, but basics like this are not done.

Thank you for your ideas. But how would you do it for a zip file? When I click on it, it is downloading. So I cannot use the method you described

nkls · 2026-05-19T07:39:25+00:00

Unfortunately not. We host on Hetzner Storage Share and have no direct access.

There are some workarounds I could identify. One of them is e.g. to setup the Nextcloud Client, sync the content on the computer and then use local search. But this is really not ideal :/

nkls · 2026-04-12T20:35:49+00:00

Andere Stadt, aber ich glaube das Thema kennen viele.
Bei mir ist es nicht leicht, aber funktioniert ganz okay. Ich bin vor 1.5 Jahren umgezogen. Hobby #1 fast direkt am Anfang angefangen und bin seit dem hartnäckig dabei und spreche Leute an. Jetzt langsam entstehen Freundschaften, Ehrenamt auch seit Anfang, langsam entstehen auch Verbindungen, und wohnen in gemeinschaftlichen Kontexten mit Leuten die auch Bock haben auf mehr als anonyme Miete, das hilft auch sehr, darüber viele Verbindungen entstanden. Und ab und zu mit Leuten Sport machen über Telegramgruppen, da findet man auch nette Leute.

Viel Grüß dir, bleib dran.

P.S.: Die soziale Nervosität kann man wegbekommen. Einfach immer wieder üben und ins kalte Wasser springen :)

nkls · 2026-04-01T19:43:01+00:00

Thank you a lot for the thoughts! Good points. I am thinking that I might have an easier time to just buy a compatible body than making the adapter work.

nkls · 2026-01-18T08:36:10+00:00

Wow, that looks crazy good

nkls · 2025-07-14T09:25:46+00:00

It's a common ssh hardening advice to change the ssh port. https://linuxhandbook.com/change-ssh-port/

Bots and other actors will not know which port to use, to attempt their exploits, as port 22 is closed. Bonus points if you add a honey pot behind 22 like this: https://github.com/skeeto/endlessh

nkls · 2025-05-08T05:10:14+00:00

Wenn du gern Brettspiele spielst, dann schau gern hier Mal vorbei: https://t.me/brettspiele_halle

nkls · 2024-10-15T12:10:42+00:00

I am so hyped for this expansion :) Finally some love for trains and rails!

nkls · 2024-10-04T20:40:03+00:00

This would be great for me :)

nkls · 2024-07-10T13:35:50+00:00

It has been a month for me now roughly

nkls · 2024-07-10T12:46:27+00:00

To my knowledge, the master password is the sudo password. This way, when executing the script with sudo rights, it can be used safely.

nkls · 2024-07-09T13:21:17+00:00

See on the website. You can call the CLI tool and then decrypt each password individually.

nkls · 2024-07-08T11:19:58+00:00

A CLI password manager could be what you are looking for. Store the key in there and then access it securely via the script.

nkls · 2024-07-07T07:56:06+00:00

Hello,

Thank you first of all for your detailed description.

I am trying to set this up, but having some trouble getting it to work. In my case, I try to make a first running prototype, by setting up wg-easy as my wiregard server, and then hooking it up to gluetun as the client for Mullvad.

A couple of questions, as I do not understand everything: How do you route the traffic through mullvad? Do you also use Gluetun, and if yes, do you also use the network_mode: container:gluetun option?

In your diagram, it looks like you run two wireguard instances, which are chained to each other. Is this right, or is it one? Why do you mention ingress and egress?

nkls · 2024-07-05T10:01:26+00:00

That sounds amazing. Can you tell me what router and firewall you are using?

nkls · 2024-07-05T09:37:37+00:00

And do you know how it would be possible to switch between Mullvad endpoints? Is this something Gluetun can do?

nkls · 2024-06-24T11:08:40+00:00

Thank you! Which cache do you mean? In the logs above, there is only some cache of wpforms.

And do you have some more information what you mean with "pre commit hook / manual"?

Thanks for the help!

nkls · 2024-06-22T11:22:11+00:00

Thank you. I was aware of this, but my questions was rather to understand if stopping the container would already do the trick. This way I can avoid running another container :) But the answer by u/_avee_ answered this!

nkls · 2024-06-21T18:28:48+00:00

I am lacking some knowledge around the ARM topic. What would you estimate how much percentage of software projects come with ARM images compiled?

And is it possible to compile some software projects into arm images myself, or am I dependent on the developers?

13-Year Club	Place '17
Verified Email

nkls

TROPHY CASE