pezhore

Ah, I wonder if it's something with the Wasabi S3 hosting. I'll check into it.

It's literally all I wanted to do when I saw the .bond TLD came up for registration.

You can take stronk.bond from my cold dead hands.

Ideally, sure use a password generator - but I wouldn't worry about the security of a password generator like the one I linked.

1. There's no linking of the password you generated to whichever account you are creating.
2. There's no guarantee from the web operator's perspective that you are actually using the generated passwords for anything at all.

Again, use bitwarden's generator - or equivalent - for passphrases, but in the absence of that correcthorsebatterystaple.com is good enough for a non-shared password.

The other thing to keep in mind with PiHole - some things are just going to break with it's default blocking, namely the Google suggested results.

i know, I know - just don't use google, but android phones/parents have a hard time not just braindead going to Google for results.

It's not the end of the world - I've trained myself to just keep scrolling to actual results.

Another feature for PiHole is local DNS - if you want, you can set up custom dnsmasq entries for self hosted/internal services.

The brand/type of wifi router is more of a technical requirements discussion than privacy discussion.

For instance, I live in a two story townhome rental with the modem in the basement - so I picked up an Orbi mesh system to bounce wifi up to the second floor. I also have a fairly complex network with IoT VLAN, DMZ (for remote VPN) and other network segments - again the orbi doing different VLANs per SSID was a deciding factor.

I've also only used the Orbi as an access point, relying on a dedicated firewall/router for that stuff.

If you're looking at a flat network (e.g. everything on one segment - the typical home user setup), pretty much any WiFi router from Best Buy or equivalent will do the job. Check your current devices to see if you can take advantage of WiFi 7 technology - otherwise save a few bucks and go WiFi 6.

For security purposes, change the default SSID (the wireless name) to something unique - and change the password to something from correcthorsebatterystaple.net. You don't need the default jumble of letters and numbers to be secure.

Lastly, getting to your privacy concerns, look at the DHCP settings - that's what hands out IP addresses to your devices so they can reach the internet. Change the DNS servers to something other than your ISP. This looks like a good starting point.

The big things are to make sure you don't expose your router management to the Internet (the default shouldn't do that) and to make sure you periodically check for firmware updates.

If you want to up your game, you could look at spinning up a self-hosted DNS server like Pi-Hole - but that can be a bit more advanced to get setup and troubleshoot if something goes wrong.

I'm not seeing any replies that are super helpful for your question - so here's what I do: throw a Linux desktop on a Raspberry Pi, or NUC and use the TV like monitor. Get a wireless keyboard/mouse combo and watch Plex through the appimage or just Firefox. Bonus, now any website that does video can be viewed on your big screen tv without dealing with any casting apps.

I would consider using your Synology for what it's good at - storage.

My homelab has a Synology DS1618 and servers are Lenovo M90q systems. They have enough compute to get the job done, and use the Synology NFS mount for storage.

How long before companies start using this as an excuse for return to office?

Sure, you've been working here since before the pandemic, but maybe now you're a North Korean spy! The only way to be sure is for you to come into the office and average 4 days a week.

Yeah, for the integrated CI/CD, give GitLab a shot - it saves on spinning up a Jenkins or ConcourseCI server.

CI/CD can be useful for triggering automation after merge requests are approved, building infrastructure from code, etc.

I'll come out with an anti-recommendation: Don't do GitLab.

They used to be quite good, but lately (as in the past two years or so) they've been putting things behind a licensing paywall.

Now if your company wants to pay for GitLab, then maybe consider it? But I'd probably look at some of the other options people have mentioned in this thread.

I mean at least Biden is a slow roll, Trump would rather nuke them.