Yes, the restriction to a single VPN client is annoying.

Blocking ad/telemetry domains can be done by adding Adguards DNS servers in the OS settings. Sadly blocking apps Internet permissions completely is not possible (except on OS like LineageOS, CalyxOS or GrapheneOS).

Symphonium is a great Android music player which connects to a Subsonic or Jellyfin server (or any other protocol like SMB).

Navidrome is a music server which implements the Subsonic protocol. This means apps like Symphonium can connect to it.

Any old PC is enough, even a Raspberry Pi is fast enough for a music server.

1. Install Navidrome on the server/pc
2. Configure Navidrome (open ports, add your music library/folder)
3. Connect a subsonic-compatible music app to to the server (I.e. type in IP or domain as well as the port).

Anything more like SSL (https) and a domain is optional for getting it working, and only a benefit if used outside of your home network. Using Tailscale makes a domain/SSL unnecessary and also no longer needs messing around with networking (e.g. no opening ports on the router).

The survey was originally sent out on reddit /r/selfhosted, so I expect most respondents are from there.

No, I haven’t connected a Pi to a 4k TV.

FreeTube does not have controller support, and for AndroidTV I’d recommend SmartTube.

Kodi/LibreELEC is able to do all of it, but IMO it’s not a good experience for browsing YouTube and I don’t know how well the third party Steam Link integrations work.

This is why I’d also recommend LineageOS Android TV, which supports Pi’s thanks to konstakang. But I’m not sure why it’d work better than a FireTV stick, since both run AndroidTV.

Edit: I’ve had an issue where the Pi 5 wouldn’t boot AndroidTV, until I tried to turn it on again after a few weeks. So I’d recommend sticking with the FireTV + SmartTube + Jellyfin + Steam Link (unless you’ve got a Pi 5 lying around anyway).

Edit 2: The Pi 5 + Android TV had issues with HDMI-CEC of the TV, so I had to buy a remote with a USB adapter. This sends the wrong signals (e.g. keyboard enter, not what Android TV expects), which is fixable with some app remapper. Maybe it’ll work better for you, but the FireTV is likely the easier solution.

Yes.

Because they use the official apps/web-vault, they don’t need to implement most of the vault/encryption features, so at least the actual data should be fine.

Security audits are expensive, so I don’t expect it to happen, unless some sponsor pays for it.

They have processes for CVEs and it seems like there wasn’t any major security issues (altough I wouldn’t host a public instance for unknown users).

Vaultwarden is one of the few services I’d actually trust to be secure, so I wouldn’t worry if you update timely to new versions.

Yes, Bitwarden browser plugins require TLS, so I use DNS challenge to get a cert without an open port 80/443.

The domain points to a local IP, so I can’t access it without the VPN.

Having everything behind a reverse proxy makes it much easier to know which services are open, and I only need to open port 80/443 on my servers firewall.

Fully agreed.

Accessing Vaultwarden through a VPN gives me peace of mind that it can’t be attacked.

Another great thing about Bitwarden is that it’s possible to export locally cached passwords to (encrypted) json/csv. This makes recovery possible even if all backups were gone.

Great to hear you found my comment helpful.

Just make sure you make backups regularly. Especially with used drives, I wouldn’t count on them surviving the stress of a rebuild. If a second drive fails in a RAID10, all data might be gone.

Edit: I’d be thankful if you could report back how the test goes. I need a drive for a backup ;) and I’m considering buying from eBay too.

I will test them upon receiving and see how it goes from there:)

I don’t know where exactly you live, but if your in the EU customs/taxes + shipping will make the deal worse, but better than expected.

E.g. for Germany, this drive would cost 382€ with UPS Saver Duties & Taxes included, instead of 273€ for the drive itself.

I’ve found the same drive with a local commercial eBay seller for 420€, including taxes and shipping.

A new 24TB drive would cost 485€.

Edit: IMO a better deal would be 22TB drives, which have the same price per TB but are new. But then again, their used/recertified price is also ~10% lower than new.

Is your Jellyfin database on the PI’s microSD or on the SSD? Maybe the SD isn’t fast enough (although I’m also not sure whether an USB SSD performs better).

Why LVM + BTRFS instead of only using btrfs? Unless you need RAID 5/6, which doesn’t work well on btrfs.

Findroid does less, but what it does, it does better (imo).

In addition, Findroid supports jumoog’s Intro Skipper and Trickplay, which isn’t available in Jellyfin Android.

The major missing feature is transcoding support.

I’m not the creator of the survey, but I’ve just send them the link to this discussion on Mastodon, so they can take the feedback into account.

Thanks for the correction. It’s a shame that sysadmins balcklist middle nodes too, since they won’t see any TOR traffic originating from your IP address anyway.

Make sure to not refresh the page, else it seems like all progress is lost.
I found out simultaneously that I enabled pull down to refresh the page in Firefox Android.

Edit: The survey wasn’t created by me, I just shared it.

There’s different types of relay, including exit relays, which are the legally problematic type. Middle, guard, and bridge relays don’t face the same issues with law enforcement and IP blocking.

Yes, there’s many ways to make programs unable to use other network interfaces. E.g. I’m creating a network namespace with a single wg0 interface, which I make services use through systemd NetworkNamespacePath.

That said, I’d argue gluetun is pretty much foolproof, especially with most people using docker which messes with iptables (edit: although I don’t know if this’d be an issue for this use case).