It does have significantly faster hardware video encoding/decoding

Thank you for the very detailed response

I also use this and can recommend it

I didn’t know that, could you give an example?

But it literally is a summary.

It run’s an executable as the user with id 0 (root) and it’s called run0.

It’s a mobile app for server monitoring that doesn’t require installations on the server.

Also, is this tone really necessary?

KDE also has an easy GUI to configure this. It’s called autostart in the settings app.

The server-side software is optional and only for push notifications and home screen widgets

Why are you creating a system service for a user application? It will run Spotify as root unless you override the user. Did you know you can add your own services for your user at ~/.config/systemd/user/?

Anyway, your method to add the service seems correct (create a file and reload the daemon), so I suspect it might refuse to load the file due to a syntax error in the service. Also perhaps compare the file permissions with the other files in the systemd folder.

What about using a Google Sheets spreadsheet with the file content encoded in BASE64?

sudo has more than 220k lines of code, I can definitely see the use of a simpler alternative.

Yes, plain text was more of an analogy

It’s E2EE therefore you can’t just use an IMAP server that works with “plaintext” data.

Yes, it seems to be a hit or a miss. I don’t think I live near any central infrastructure or ISP, especially not this specific part of the city.

No, I’m currently using Tailscale but have been considering switching to Netbird to not be reliant on Tailscale.

he specified static website, which rules out WP

Oops missed that

EDIT: And I missed Immich too

You don’t have to be successful to get hit by bots scanning for known vulnerabilities in common software (e.g. Wordpress), but OP won’t have to worry about that if they keep everything up to date. However, this is also necessary when renting a VPN from said centralised services.

You can simply set up a VPN for your home network (e.g. Tailscale, Netbird, Headscale, etc.) and you won’t have to worry about attacks. Public services require a little more work, you will need to rely on a service from a company, either a tunnel (e.g. Tailscale funnel) or a VPS.

Ip address doesn’t expose where you live.

https://letmegooglethat.com/?q=geoip+lookup

Tunnels stop you from opening a port so nothing is exposed openly to the internet¹ but it does not keep your ip private².

This is also incorrect.

1. The entire purpose of CF tunnels is to expose sites on the internet
2. CF tunnels (and services like it e.g. ngrok) rely on shared proxy servers that forward traffic based on HTTP host headers (which is why you can’t forward arbitrary TCP traffic). The IP of the site will therefore have the shared IP of the company’s proxy server instead of your own.

This is false. Some ISP’s change IP’s often, but some don’t and sometimes geoip lookups can be really accurate. My IP has remained the same since I moved in, and a geoip lookup results in a coordinate less than a kilometer away. It does matter.