Meanwhile, the only element I need to identify an undisclosed vibe coded project these days is a single statement found in the project’s repo: Made with ♥ by Developer. (Developers are not capable of love.)

Made with ♥ by selfh.st

Tbh I still consider Proxmox as Debian, so you’re pretty much there ;).

Same, literaly only have bazzite and android on one device each with everything else being Debian.

Although I have been thinking about switching to Nix for a more robust backup/restore setup.

How quick could you pick it up? And how does it handle one config for different devices (due to different hardware(fstab/cryptsetup differences), propietary/non-mainlined drivers?

I have been thinking about switching because I’d love a reproduciable system but fear it would take some of that flexibility I rely on (I’ve had some issues with ftstab/cryptsetup and initramfs customizations on the fedora atomic base of bazzite on my steamdeck).

I doubt home inspections would fly with German law. Unpaid overtime is legal as long as the legal limits wrt to total working time and minimum wage are met (which they will if you are making 80k…). Requiring the home office to be secured seems legal depending on the working environment (does it also need to be secured outside of working hours?).

They can require work on weekends and holidays with no notice

Working weakends or Holidays can be legal depending on the work . No notice seems illegal (unless they are paying you to be on call).

There isn’t a single mention to remote working on the contract

This is a red flag, there is no obligation for employers to enable remote work, so if it’s not in the contract you don’t have anything to fall back on. This might be especially problematic for working from outside of the EU.

They can relocate me to any place with a 2 months notice

If it is really that broad that is probably unenforcable.

Take all of this with a grain of salt, I am not a lawyer.

Honestly, depending on how much you like the position otherwise and how much you need the job, I’d tell them to change the contract (esp. the homeoffice clause) or you’re out and then just walk if they don’t.

For that scenario you could also consider using certificate based login. Just store your root certificate in a safe place (like a Keepass) an then sign new keys for your new devices when you get one.

https://docs.ssh.com/manuals/server-admin/44/User_Authentication_with_Certificates.html

and I’d need to have password access enabled in order to add the keys

Besides the other points, you could just add the public keys directly in the .ssh/authorized_keys(2) file of the server as long as you still have access from another device. That way you don’t have to enable passwords.

I get a 502 bad gateway on the domain :(

or the receipt is sent via email Paperless can automatically ingest e-Mails. I agree on the rest though.

The lever guy is smiling

I was hinting at your last sentence. It seems, they do indeed target a lower sdk: https://gitlab.com/fmd-foss/fmd-android/-/issues?show=eyJpaWQiOiIzNTQiLCJmdWxsX3BhdGgiOiJmbWQtZm9zcy9mbWQtYW5kcm9pZCIsImlkIjoxNzI3NjgxMTN9

F-droid also warns me, the target sdk ist too old and automatic updates will not be possible.

(Thank you for the post anyhow, I didn’t know the app existed before)

The app seems to target an older sdk, right?

Every 5mins seems insane. Why do you need to schedule it that frequently?

Also, I wouldn’t shy from keeping the database on the same, fast storage as the OS, even if that’s flash. Move to an external SSD when you can. HDDs have such long seek times.

Very much true. I installed Immich on my dads Synology for him and compared to my own setup at home the speeds are abysmall (it even crased a few times during the first indexing and ML run). I suspect a major part is that the whole os runs on an hdd.

If you put the database on an sd-card just ensure you make frequent backups somwhere else. I wouldn’t trust flash storage to keep my data safe.

Right, he who does not rely on someone elses DNS-server shall throw the first stone!

Afaik Synology supports Btrfs which I honestly prefer at this point if you don’t need filesystem based encryption or professionall scaling and caching features.

What is stoping Google from just blocking your entire IP-Block?

Thats what all my other services use though and I don’t know how I’d connect them to traefic.

Because I don’t know how docker works, the .yaml given by nightscout is using traefik and I don’t know how to remove it without breakting the nightscout container.

My Nginx is running in the same local network but on a different IP so there should not be a collision with the traefik ports.