Immich came out in '22 and I don’t think makes much use of LLMs, at least it doesn’t feel like it does.

For resource usage did you disable all the search, face recognition, and transcoding modules? Those will have heavy resource usage on CPU if you didn’t set up hardware acceleration for them.

I find it very fast overall and the heavier resource usage is only when photos are initially added.

Most people using Brave have no idea of those facts I’d bet.

I’ve got my own domain on Zoho mail, not sure if it’s still free for custom domains.

But just for fun I might set up Stalwart with an SMTP relay through SMTP2GO or similar.

I guess? They advertise it as blocking bots and bad actors and such but it doesn’t really do that.

IMO on-demand isn’t going to protect you much. Malware these days typically runs and does what it needs to do so quickly that only a system with solid real-time protection is going to have any chance at stopping things.

They do talk a lot about security and their WAF on their home page, it might be secondary but they mention it a lot.

I don’t believe there are any logs being transferred, just the abusive IPs are shared with the central DB.

So if an IP starts hitting a ton of rules (like .env access, repeated 403s, 404s, 429s, etc… Or specific AppSec rules) then that IP is blocked and sent to their central DB where it’s pushed out to everyone running crowdsec.

On my setup crowdsec has been more effective than cloudflare at stopping scanners and bots from overloading things, cloudflare just lets basically everything through so I stopped using it.

That said I’m curious if you remember the source of the real world tests, because I’d love to see what’s actually better.

Not really, there are some AV scanners for Linux but they are more an on-demand thing to scan specific files when needed.

Makes sense! Rate limits are important IMO and most sites don’t seem to have them.

I feel like a simple rate limit set to what your server can handle without issues is a better solution. Or combine it with Anubis at least.

I’m not sure I follow why this would be a big concern. If your drive is encrypted the worst they can do is wipe your data, which would require restoring a backup image. A hassle but it won’t give them access to your data.

Pangolin would work, it’s still wireguard underneath but with a webUI to set up things and simplify it. It’s fairly easy to install on your server with their docker compose examples.

SMB often has much better performance in my experience. Plus it’s just a lot easier to use as it supports basically every kind of client.

The built in windows defender is very good, no reason to pay for or install anything else.

Is the mouse plugged directly into the motherboard USB port? I’ve had this with the built in USB hub in my monitor, it fails to initialize after waking up sometimes and needs a replug.

Yeah from a performance and safety standpoint I don’t think there’s much difference. There is some argument that repair parts availability might be worse with Chinese vehicles, but the usual domestic manufacturers are also actively hostile to repairs now anyway so I don’t know how different that will really be.

The propaganda of “Chinese vehicles are cheap and dangerous” only works when people don’t have the product in front of them.

Plus they’d have to pass whatever requirements in the US to be sold, the same ones that the ‘domestic’ manufacturers do.

The people using free davinci resolve are also most likely to be working with h264 and h265.

It’s bizarre that I can just install those codecs and have resolve pick them up from the system like other media players do.

Plus if the general requirement is ‘high quality code’ then that automatically excludes the majority of LLM usage where people just vibe code it and rely heavily on the LLM to do the work. VS someone writing their own code while using an LLM to help find problems.

What does these “tunnels” actually add?

Ease of deployment / time savings generally. You can certainly do it yourself with wireguard and a reverse proxy.