Migrating from iOS to Graphene -- what to do about photos?

wonder75

missing-root easy FOSS apps:

Nice apps selection. I use many of them on my device.

missing-root

Those are (only) not apps I use but that I would recommend for people wanting something easy, with big downsides.

For example the florisboard internal keyboard is a very important security feature

r134a

DeletedUser87 also another benefit is that u can assign a dns server to tailscale aswell. I have 2 piholes one for home one on i assigned to tailscale. All my domains are for example: nextcloud.home, youtube.home, tar1090.home etc... on my home dns nextcloud.home points to local ip 192.168.x.x & my tailscale dns nextcloud.home points at its tailscale ip. So there's no domain needed, which i prefer.
Because i'm sure hosting 20 services, there are vulnerabilities present, and prefer them not directly accesible through the internet

DeletedUser87

r134a reasonable. Some of my services are also hiding behind my NAT. Some I need publicly accessible though, mostly for file sharing and collaboration reasons. My trust relies mostly on a good update strategy, 2FA wherever possible and Fail2Ban. I'm also thinking about implementing a network monitor somehow. But that's a project for another day.

r134a

I think u can also share and revoke specific services from your tailscale network to other tailscale users, so you could still share files with others & collaborations etc. but it's a little hassle as they need to install tailscale first then and create an account...So it's not that convenient.

I also use the same strategy with the addition of blocking all network acces by default. For example on my nextcloud instance, all incoming & outgoing traffic is blocked. Only 1 port from 1 ip is allowed from ingoing traffic from my reverse proxy. On my reverse proxy same everything blocked by default in&out. Only allowed 1 port out to nextcloud and in my specific tailscale ip & my pc and laptop fixed ip's on my home network.

Edit, only when i update the host or nextcloud itself i allow outgoing network traffic, till the updates are finished then i revoke again.

DeletedUser87

r134a install tailscale first

Yeah... that's not gonna happen hahaha. Seems like you have a pretty thorough understanding of your setup.
I'm trying to balance usability and security here like a juggler xD

missing-root

DeletedUser87

I will need to give this a try.

so duckdns and TTL is the key here?

I use Nextclound and am pretty happy with it, but I dont use it on the phone.

Apart from shareability, you can have all the benefits with Syncthing

And selfhosting on a VPS makes no sense for privacy, if you dont use at least LUKS, as the data can be read by the provider. Cryptreboot is essential here and memory is still not your own.

DeletedUser87

missing-root duckdns is the most precious tool in my setup. I created an account and installed the script. Then I set a CNAME record to point my duckdns domain to my root/@ and it fetches A records perfectly. Adjusting TTLs is a no brainer, set the TTL to like 300 (seconds) and it will fetch new records constantly, just in case the IP changes.
Regarding Nextcloud, it has turned into bloated s***. I only really use it for uploading my weekly Molly backups and to sync contacts, calendar and reminders via DAVx5. The app is slow, feels outdated and is generally buggy. I don't know how they're able to sell that to enterprise customers; they must really have no standards at all.
Immich has a lot of benefits compared to Syncthing. The best of which is the centralization. I can use the phone app, I can also use any browser to manage my files. I can share folders (which I do, for example pictures from a recent birthday party) with others who don't know me personally and I can also use Immich as my gallery to manage photos on device. Meaning, it deletes photos from the device and from the cloud. Or just from the device and leaves them in the cloud. Or delete them from the cloud and leave them on device, you get the idea. The search is also getting really good. It's powered by a local AI and can search for almost anything.
The main problem with all the FOSS gallery apps out there, is that they suck for the most part. Immich is like a Google Photos clone in most aspects which has saved my sanity.

r134a

DeletedUser87 i like to pretend i have a thorough understanding, however the more i learn, the more i realize i'm still a noob :(.

manugraph

DeletedUser87 I can share folders (which I do, for example pictures from a recent birthday party) with others who don't know me personally and I can also use Immich as my gallery to manage photos on device

How do you open Immich to the web when you're actually using all other services via VPN?

I've thought about this already but am a bit unsure if I should really open ports to the Immich container. Rest of my services lies behind Wireguard and the currently only open VPN port on my Router.

r134a

I might look into immich aswell, as nextcloud android app is indeed becoming sh*t. A recent update enabled 2-way sync by default and 2-way synced all your files on your server to your phone in a constant loop lol. I have like 4tb and luckily became aware relatively quickly as my phone almost burned a hole in my pants. I went over 15gb of my monthly data plan and had to pay accordingly :(

https://github.com/nextcloud/android/issues/13738

DeletedUser87

r134a https://github.com/nextcloud/android/issues/13738

Geez, I didn't even know that... Now I feel lucky. Just two months ago I wanted to offload most of my data (like 300 gigs) to Nextcloud. It was too buggy on the desktop, so I said "screw it". Dodged a bullet right there, I guess.
And yeah, I can't praise Immich enough. The development is very active (thank you, FUTO) and it seems to constantly get better.

lcalamar

tilion_silverbow
Your best and easiest solution would be to migrate to Ente - then whatever 'platform' you are using becomes moot... besides - it is a great product.

perhaps you can dumb-down your Proton account - to save the $$$ needed for Ente photos... also watch for a black friday deal - they had a great one last year.

Don't attempt to compare protondrive to any other photo app (ente, apple, google) - it just isn't in the same category. At least with Ente you partner won't be adding ANY inconvenience/friction in her life...

outside that if you try to go with a 'free' solution - then you are going to get that lack of features and added friction... I'd say find a way to pony up to Ente

lcalamar

lcalamar Ente IS having a really strong Black Friday Sale:

https://ente.io/blackfriday/

DeletedUser235

tilion_silverbow

Anyway, she can already jump to GrapheneOS and figure this out later. Don't do everything at once.
If you can't afford paying another subscription and don't want to use Proton, then the only option I see is a 3-2-1 local backup strategy. Store to a computer, which is backed up somewhere (hard disk, cloud). Or Syncthing, but I don't know if it will be frictionless. Or self hosting, but damn, lazyness -_-

For now, stay with Google Photos on GrapheneOS and migrate when you find a solution !

lcalamar dumb-down your Proton account - to save the $$$ needed for Ente photos

This is what I would do. Honestly ente is very worth the price. If you do it tell me and I give you a code to have 10Gb more for free.
Can't you use a cheaper VPN (Windscribe on sales or with Build a plan), live without drive, use Bitwarden free and Addy Lite or free and use Mail and Calendar free or Mail+ ?

DeletedUser87

manugraph I never said I use all other services via VPN. The VPN is for the services that I won't expose like NGINX Proxy Manager, SSH, etc. Immich runs in the open wild, I just have to trust the devs on this one.

lcalamar

DeletedUser235 Yes - this exactly - I have a minimal 'plan' with Proton. There are really no other 'features' that Proton offers that can't be got for free or close to free - that work better.

I'd start by not paying for VPN... unless you are using it to access your home network when external - VPN is mostly a waste of money and a lot of hassle (banks, streaming, etc...) I do use my 1 connection of ProtonVPN that comes free - and that suffices just fine, but I rarely use it.

VPN really doesn't provide any privacy protection anyway

DeletedUser69

lcalamar your last statement is not accurate and it shouldn't be presented as a general advice. VPN can provide a data privacy layer from your ISP, disable services from tracking users based on their IP and to access geo-fenced content to name a few. Many find this of value.

lcalamar

DeletedUser69 Guess we'll have to disagree on VPN. But to say my statement is inaccurate is - well - inaccurate. It is an informed opinion and when it comes to privacy - 90% of what you read is an informed opinion. I HAVE researched this topic quite a bit - and have fallen on the side that I stated. If you really want to 'hide' from your ISP - my opinion is you are better spending money on something like NextDNS (which I DO use)...

I DO use my own wireguard VPN - but only use it when on a public network - and/or want to access my internal systems when I'm not on my home network...

Lots of information out there that support my 'opinion'... take it or leave it but please don't blindly say my opinion is inaccurate, it is ok to say you disagree though!

Below is just to have something to look into... but again - LOTs of similar information out there...
Why You Don't need a VPN

treenutz68

lcalamar

That is interesting. I've always heard that a no log VPN is better than an ISP who by law is going to be logging all your activity and retaining it for some extended period of time. Best case scenario they only provide it to law enforcement when subpoenaed, worst case scenario it is sold to marketers and/or lost in an inevitable data breach.

lcalamar

treenutz68 Yeah - this is one of the issues regarding privacy and why it is so elusive. At every point in the online 'chain' - someone is going to try to take your data. So - at some point who is it you 'trust'? For example - I am using Google FI and I HATE using google for anything. However - do I distrust Google more than Verizon or AT&T? I also use google fiber (and hate that also - BUT - they are my only fiber option where I live), but who do I distrust more - Comcast or Time Warner or some other ISP? (heck - Comcast was dumbing down my speed whenever I was using non-comcast services... )

The best we can do with Privacy is control what we can control and then understand that getting from 90% privacy to 100% privacy is not really possible... at some point we start to thrash and create so much friction that it isn't worth the hassle.

... I use NextDNS - and while I really like that service - I still come across a lot of sites that NextDNS blocks - sites I need to visit... so I end up doing some type of work-around... again - more hassle and friction...

... when I was using VPN - (I used to use IVPN in my router so all home traffic went through VPN)... however - banks and streamers and many other services were blocking me... and yes I could have worked harder to get around it - but again - at some point it just wasn't worth the hassle - especially when I factored in that VPN really wasn't doing much in the way of privacy - and it cost $$$ and my time...

I try to do what I can to be sensible regarding privacy - but I've understood the only way to be 100% private is not to be online...

« Previous Page Next Page »