My recollection is that Fail2Ban has some default settings, but is mostly reactionary in terms of blacklisting things that it observes trying to get in. Crowdsec behaves in a similar vein but, as the name implies, includes a lot of crowdsourced rules and preventative measures.

Now that you have a working setup, make a backup. Then, experiment with either starting over and only doing a few of the steps OR experiment with removing some of those parameters. Find your minimum set of working parameters this way, then you can look them up to find out more about what each parameter does that you discovered to be essential.

I can for sure tell you that passing the render device is required for hardware transcoding, but I’m not sure what else is required. The iommu and vfio parameters are related to passing the entire gpu device into a container, but I don’t know anything about Proxmox so I can’t comment on whether that would be required for your situation.

Same here! 10gb free is more than enough for the volumes I mount on my containers with config, etc

DOCSIS (AKA internet service over coaxial cable) deals in some number of bonded channels, meaning portions of the total available bandwidth on the wire. They asymmetrically allocate channels to download speeds to overcome the limitations of the older copper wire technology. 100Mbps symmetrical is beyond what most of their existing “Broadband” infrastructure can support in rural and underserved areas, so they complained about it being unreasonable. 100Mbps symmetrical is certainly possible over DOCSIS, but speeds are only as fast as the weakest link… And there are a helluva lot of weak links outside of high population density areas.

Does it skip the recode completely if the format is already opus?

Microsoft’s blog adds caveats, such as that Excel avoids the conversion by saving the data as text, which means the data may not work for calculations later. There’s also a known issue where you can’t disable the conversions when running macros.

To be clear, I definitely agree that this is a bad idea.

However, one of the hardest things about making autonomous cars work is avoiding traffic and pedestrians. If air traffic control can be managed such that these avoid other aircraft (and things like buildings and cell towers, obviously) I could actually see this as easier to get the software working.

The commit added Ukrainian translations to the install instructions. Most were vanilla, but at the end of the file they added some statements with things like “Oh no, this is inappropriate for your sensitive religion”. I’m not quoting exactly here, for obvious reasons.

Maybe apps will finally feel free to bundle LAME instead of forcing you to download it externally!

Just want to shout out to reviewbrah for giving us this absolute gem of a phrase

This is the real blow. Truly the end of an era.

My strategy too. I have a piece of paper with my bitwarden credentials (password and OTP code) and a list of important items like bank accounts, utilities on autopay, etc.

I review it with my spouse every year and update anything out of date.

I completely believe that, assuming it’s one of the non-4K sticks. The older generation models are rather wimpy and slow (we had one that we replaced for exactly this reason), but any of the newer 4K-capable devices have been snappy and responsive.

I recommend a Roku streaming stick or a Roku streambar if you need a decent sound bar too. That’s what we use on our “smart” TVs and I hate ads too. Full disclosure: they do put one ad on the homescreen off to the side, but none in the actual content apps. You’ll only see it while between apps.

That workaround has been implemented for mobile clients too https://github.com/immich-app/immich/pull/2101