This is part of that process.

Create a vpn tunnel between the public and private servers for that app.

There’s no time to learn like the present! Your existing compose file has an example, but if that doesn’t work, the traefik docs are useful too.

Then drop nginx and just use traefik.

Yeah if you read the full story, they were fully expecting to find it, they were just measuring how much.

Why are you using both nginx and traefik?

If secure boot is off, and you run malware on your pc, it can change the boot process to escalate privileges.

This probably requires root or admin in the first place, but if they can install a malware loader, they can establish persistence so that even if you remove the os-level components, they’ll be reinstalled on reboot.

Not just old insecure, but current insecure too. Plenty of stuff runs fully current but still vulnerable code. Put it behind a firewall.

Erythritol.

Study: https://pubmed.ncbi.nlm.nih.gov/40459966/

Nor is it authentication.

https://github.com/TecharoHQ/anubis

Inbound spam is also a problem. Gmail’s filter is pretty good, and it responds to what you personally mark as spam. Other providers aren’t as good, and I don’t know if there’s any good self-hosted filter at all.

Yeah, residential ISPs do that because if they don’t, spammers will just turn every botnet member into a spam host. You’ll probably have to get a business connection or change ISPs.

Or just don’t self-host email. I wouldn’t recommend it unless you’re a masochist.

Even better would be to automatically install vlc-plugins-all for people upgrading, so that it preserves the existing behavior.

If you need to restore it, back it up.

How do you plan to restore if the whole drive dies?

Today’s image of the pair looks to feature the actors in some sort of costume for their roles

Actors wear costumes? Youdontsay.jpg

I’d watch either of those

I’d say you want Linux from Scratch then, but even then the Linux kernel maintainers are making choices for you.

But Linus is very firm in that they never break userspace, so you should never see an issue like this when updating the kernel.

https://en.wikipedia.org/wiki/Principle_of_least_astonishment

Someone should inform whoever made that change. If a package is split in a new release, the initial state should match the final as closely as possible, in this case by installing the new optional dependencies automatically. (Although I’m not sure why they’d want to split everything out like that anyway; no other VLC distribution does that, so splitting is itself a violation.)

Maybe Manjaro might be an alternative? I haven’t personally used it. I don’t like this kind of surprise, so I stick to boring distros like Debian. I used to use CentOS but it was too boring.

Recover the accounts and close them?