No problem. I hope you found it useful. Anubis is not AI. It discerns between bots/AI scrapers and legitimate users using a combination of heuristics and a mathematical challenge, thereby protecting the website that sits behind it. Check out the documentation at: https://anubis.techaro.lol/

For auth providers, I’ve tried all the ones you named. Here’s my brief analysis:

• Authelia - deployment and configuration is moderately complex but documentation is great and it works well with Caddy reverse proxy.
• Authentik - way too complex to deploy and configure, requires you to understand their concepts very well. I’d stay away from it.
• PocketID - super easy to deploy and configure. Passkeys are easier and arguably more secure than passwords and it supports a few methods other than passkeys.

With these services you mentioned you want to or are already hosting, you could use the following in the order they are listed:

1. Basic auth using Caddy (reverse proxy layer)
2. Anubis to ward off bots and scrapers (between reverse proxy and hosted service)
3. PocketID for auth (before service as single sign-on)

I would recommend 2 and 3 as 1 is pretty useless against a determined attacker. Anything that’s on the public internet is bound to be attacked at some point, so follow best practices and perform server hardening on the host machine. Remember, you classify the sensitivity of the data you host and determine the severity of the risk if that data were to be exposed. So work with that in mind when choosing an option.

Firstly, what’s your threat model - as in what are you trying to block? For SSH access, fail2ban works. For bots and scrapers, I’m not sure how effective it is. What jails have your enabled/configured for fail2ban?

I don’t have your setup, but like someone else here said, I use Caddy on Docker as a reverse proxy for all my self-hosted services running in Docker containers. One really effective means of blocking AI scrapers and bots is Anubis - https://github.com/TecharoHQ/anubis. It might be worth a shot. It works for me.

Amazon wasn’t caught doing shit. “Caught” implies there is a possibility of consequences. Two days from now nobody is going to remember this story and the world will move on and there will be no consequences for this.

I do commend the strength of his rectum for shitting while sitting in a chair. It does take great resolve to keep a straight face while doing it in a room full of people with cameras pointed at your face.

From Netflix to Nutflicks.

It is 100% to collect data and correlate online activities with a real person. Its sole purpose is to track and control people. Billionaires will stop at nothing to suck more riches out of the working class and poor.

The converse of that is also true where legitimate websites mark your order as fraud just because you used a VPN when placing the order.

This bullshit age verification doesn’t solve anything. All it does is bring circumvention measures to users’ attention and they go around it. Then these idiots wonder why it didn’t work. It is a pointless, wasteful exercise.

I wouldn’t expect nor accept any less. The apple doesn’t fall far from the tree of greed.

Sperm worm.

This is exactly why they don’t want people to disconnect from the Internet. More eyes on things constantly translates directly to as ad revenue, which then translates to stock value and company valuation. It all boils down to money. If they make people so reliant on technology that they cannot think for themselves or carry out basic life functions without technology, then they’ve done their job.

While there are so many memes about millennials, etc., they are the last generation to be able to read paper maps, drive stick shift cars, use computers, cook, clean, navigate, have grit in place of instant gratification, think for themselves (at least the non-indoctrinated ones), do things without AI, amongst other things.

The newer generations are so heavily reliant on technology and AI that they cannot do a single thing without it. Even social interactions between them are very surface-level or nonexistent. We’re doomed.

100% true. I buy games on Steam and GOG, sometimes from Epic. The convenience, the absence of enshittification, the cross-platform compatibility (or info about what’s compatible and what’s not), the periodic sales, etc. all add up and make people less likely to pirate games. The only barrier to entry at this point is price for those struggling to make ends meet.

It has always been the case except for a short period of time when Netflix was decent but then streaming turned into cable with ads and shitty content. Now it is all the more enticing due to Jellyfin, arr stack, Seerr and faster Internet speeds. If I had to pay for streaming all the shows I liked, I’d be paying in excess of $200 per month. No, thank you. The seven seas it is for me.

Canada okay? Try Windscribe. No user information collected, generates an account hashed value akin to Mullvad’s account number. You can pay by crypto, but their payment gateway collects an email address only to notify you of payment status from crypto. They’ve also got an ample number of servers. There is also no device limit like Mullvad has. Their Android app is pretty good too. I’ve been trying them recently after this Mullvad debacle and the connection and privacy seems pretty good.

You can’t spell “Felon” without “Elon”.

Rclone with any cloud provider is another great option that’s seldom mentioned. I posted my setup as a comment on another post. You may find it here - https://programming.dev/comment/23849767

I found the easiest way to sync is to use rclone. This way you can use any cloud provider like Google Drive or OneDrive or DropBox. First create the rclone remote for your cloud provider using rclone config. Second step is to create a second remote using the encryption option (menu item 16), choosing an appropriate path <first remote>:<path to directory>. Upload your KeepassXC database to this encrypted remote using rclone copy.

On Android you can use the RoundSync app from F-droid to configure the the same remotes, then create a task to copy or sync from that encrypted remote and a trigger to run that task on a schedule. Overall, this one-time setup works really well for me. This is my backup in addition to using Bitwarden for several years. Bitwarden is not going to get my money any more.