We dont proxy on lemmy.ca yet, but I assumed thumbnails would still be stored in pictrs like usual? I thought it was just the actual image links that got proxied, and thumbnails were still dumped in like usual.
We turned on cloudflare's CSAM scanner and remove anything it flags for us.
I have all my home infra on one beefy box, except for two things. These are services that I deem critical enough that I don't want them to have an outage at the same time as anything else.
Opnsense gets a dedicated mini firewall pc, and Home Assistant runs on an old intel nuc
If I recall correctly he was the boss of a team back wherever his company was. It kinda makes sense he would have knowledge of the dinos, but most of his team was kept in the dark to keep it from leaking.
Still though you need at least a couple people on site.
Everyone is ok with Python. It's a reasonable choice that's well known, well understood and doesn't have a lot of negatives. There's a million libraries for it so it's easy to get started and add support for new things.
I've never met a hobbyist developer who writes Java for fun. It lives in the enterprise world mostly, and not much else that I've seen.
Yes, configuring memory to be used for zram would mark it as unavailable for kernel fs caching.
Does iostat show your disks being pegged when it's slow? Odd that performance would be so bad on those specs, makes me think you have disk Io issues maybe.
FWIW I did this with jellyfin and ended up just using a vm instead of lxc. This way I could just pass the entire device through, not have to mess with drivers in my proxmox host, and not have to reboot all my vms/lxc just to apply updates.
I would counter that it takes significantly more power to provide someone with internet compared to a broadcast antenna.
Google tells me a low power tv antenna broadcasts at around 2.3kw. I've deployed datacenters full of racks where each rack pulls more than that. Once you take into account all the networking gear between the server and the consumer, , the internet easily requires more resources. Routers, switches and servers can be pretty power hungry.
It's not VPN endpoints we block, it's some ASN's that we've seen excessive amounts of abusive traffic from. Primarily that's isps in China, but I also added Zenlayer a while ago (which is the hosting provider your vpn endpoint was on).
I've removed them from the ban list, you should be good now. They might get readded if we see a flood of abuse from them though.
I just happened to see your comment, anyone can feel free to dm me if they have issues.
We just delete them from minio (our object storage)