thatsnothowyoudoit

If you’re a safari user (desktop and mobile): https://oblador.github.io/hush/

Neat, I’ll have to look it up. Thanks for sharing!

Nextcloud isn’t exposed, only a WireGuard connection allows for remote access to Nextcloud on my network.

The whole family has WireGuard on their laptops and phones.

They love it, because using WireGuard also means they get a by-default ad-free/tracker-free browsing experience.

Yes, this means I can’t share files securely with outsiders. It’s not a huge problem.

SMB : https://en.m.wikipedia.org/wiki/Server_Message_Block

In short it’s a way to share network access to storage across MacOS/Linux/Windows.

MacOS switched from AFS to SMB (as the default file sharing / network storage protocol) a few years ago as it was clear that was how everything was headed - though iOS and MacOS also have native support for NFS.

On linux, you can use samba to create SMB shares that will be available to your iOS device.

It’s a lot of configuration though - so maybe not the best choice.

As for Nextcloud - indeed you can use it in your local network without making it available on your WAN connection. That’s how we use it here.

When we need it remotely - we VPN into our home network. But no exposed ports. :)

Neat solution!

I use Nextcloud. But that also means setting up and managing Nextcloud. By the same token you could use google drive.

For notes and photos you can export them within the app. Notes specifically requires that you print and then hit the share on the print dialogue to save the notes to the file system as a pdf.

Notes also has another option: if you have a non-Apple mail account on your phone - you can enable notes for that email account and simply move (or copy) your notes from one account to the other. The notes will then become available within that email account mailbox structure on any device or machine where that email account is enabled.

For voice recordings you can save any voice recording directly to the iOS filesystem.

The iOS files app also allows you to connect to any other server/desktop via SMB.

There are lots of options here. None are awesome, but they work.

Thanks for confirming something I thought true. I've always been a generous tipper not because I like tipping culture, but because in the absence of an alternative it seems awful to punish the people working hard to scrape together a living by catering to my laziness.

However, I've noticed that I almost always get food that's ordered through these services very quickly – although my small sample size is anecdotal at best. But like you, I don't order through the apps if I can help it.

Update: I went and had a look and there's a Terraform provider for OPNSense under active development - it covers firewall rules, some unbound configuration options and Wireguard, which is definitely more than enough to get started.

I also found a guide on how to replicate pfBlocker's functionality on OPNSense that isn't terribly complicated.

So much of my original comment below is less-than-accurate.

OPNSense is for some, like me, not a viable alternative. pfBlockerNG in particular is the killer feature for me that has no equivalent on OPNSense. If it did I'd switch in a heartbeat.

If I have to go without pfBlockerNG, then I'd likely turn to something that had more "configuration as code" options like VyOS.

Still, it's nice to know that a fork of a fork of m0n0wall can keep the lights on, and do right by users.

If you backup your config now, you'd be able to apply the config to CE 2.7.x.

While this would limit you to an x86 type device, you wouldn't be out of options.

I am an owner of an SG-3100 as well (we don't use it anymore), but that device was what soured me on Netgate after using pfSense on a DIY router at our office for years...

I continued to use pfSense because of the sunk costs involved (time, experience, knowledge). This is likely the turning point.

Name was different, resume exactly the same. It was probably a scam or the folks applying were scammed in someway. Someone on our team told us stories of scummy “we’ll get you a tech job” services in their country and this “copied resume” phenomenon was par for the course.

I don’t believe you are in a bubble. My experience matches with your initial assertion. We just recently hired for 3 SRE roles.

Hundreds of applicants in a 24 hour window.

We had people using some kind of LLM tool during interviews, obviously so. Others were sharing the same resume with only slight modifications, and plenty of folks who couldn’t pass the screening call or a very simple tech interview.

We also had wildly unprofessional candidates who were no-shows, or had profane/NSFW desktops or couldn’t even use a terminal - for an SRE role.

So no, you’re not alone. The great candidates get hired, headhunted even.