smiletolerantly

Not to dimish your work at all, but: the Sonarr upgrades absolutely do work.

Ah, too bad. IMO better clients would make it drastically easier to convince people to switch.

Hm, I can create groups (also with muc), and the other members are added, but writing a message triggers "x left the group" for everyone. Dunno. Probably something trivial I overlooked. But honestly... Weather is too good today to be bothered 😄

Ah, I already had a TURN/STUN coturn server set up for matrix and jitsi, so it was just a matter of telling prosody about that. So I cheated a little I guess 😄 Here is my full config for that, in the unlikely event that you're using NixOS.

Very cool!

Re: the backup / restore of state in NixOS: I found myself writing the same things over and over again for each VM/service, so finally wrote this wrapper module (in action e.g. here for Jellyfin), which confgures both the backup services and timers, as well as adding a simple rsync-restore-jellyfin command to the system packages. In case you find this useful and don't already have your own abstractions, or a sufficiently different use case 😄

Nice, same! Was also really positively surprised by how great the Android app(s) for XMPP feel.

Only thing not working yet for me is group chat creation. Oh well. Maybe this weekend.

On the other hand though, voice and video calls have worked flawlessly.

Awesome! And good job, looks great!

Why are there no screenshots in the README.

Yes I know I can just install the app, but for an app that primarily seems to define itself by its UI improvements over the established competitor, the screenshots are the deciding factor in the question "Should I download and install this?", and no screenshots defaults to "no".

I mean, how can we feel superior if we are not wasting huge amounts of time setting things up!?

Why, by boasting that it's so easy, just look at that, it is only two options you need to set thanks to the 80 custom modules I've written to abstract the abstractions from nixpkgs!

I WISH I could put an /s here, but I cannot.

Interesting discussion on this from yesterday on the NixOS forums:

https://discourse.nixos.org/t/compliance-with-u-s-age-verification-laws/75791

Ehm... I'm also on Nixos and I'd say it's super trivial.

services.openssh = {
  enable = true;
  settings = {
    PasswordAuthentication = false;
    PermitRootLogin = "no";
  };
};

users.users.<name>.openssh.authorizedKeys.keys = [ list of pubkeys ideally read from file in repo ];

Eh, the machine is actually in one of my wireguard nets anyways, but for different purposes.

The nice thing about SSH key-based access is, I either have the key and login succeeds, or I have no business trying to log in.

That's why my remote root server bans via fail2ban after a single failed login.

Yes I've had to write support to get a KVM. Yes it's still configured like this.

Yeah the UX for setting it up was not great. Conversely though, the UX for using it has been fantastic so far. My biggest concern was that the clients would feel dated (on Android esp), but no, they're surprisingly polished!