Thingino makes sure your cameras are yours and no one elses, they have a list of cameras that work with it:
https://thingino.com/

Daring of them to move from one .org domain to another .org domain. One would’ve thought that a domain managed by any other country would be a safer bet.

Ah well, unbound prepared for the toggle.

# Mullvad No-Filter DoT
forward-addr: 194.242.2.3@853#dns.mullvad.net

# AdGuard Default Ad-Blocking DoT
forward-addr: 94.140.14.14@853#dns.adguard-dns.com

#Quad9 DoT 
#forward-addr: 9.9.9.9@853#dns9.quad9.net

#Quad9 no threatblocker DoT
#forward-addr: 9.9.9.10@853#dns10.quad9.net

I recommend that you look into nagios and zabbix before you get started. Both have free selfhosted open source solutions. And both are used professionally on the enterprise level so you even gain a skillset that can earn you money!

https://www.zabbix.com/download?zabbix=7.0
https://www.nagios.org/downloads/nagios-core/thanks/

(do we still call it that?)

Primary and secondary is what it is usually called today. I know both Microsoft and Cloudflare does at least.
https://www.cloudflare.com/learning/dns/glossary/primary-secondary-dns/

Check if you need a flag when starting it to bind 0.0.0.0 instead of 127.0.0.1

Ah, I can see the appeal but it’s not for me then. :)

What is the gain compared to running something battle tested like zfs or mdraid?

I’ve never used it, but bookmarked the github. Cheers. :)

22 out of 22 books i checked at Kobo had Adobe DRM. :(

That was an interesting read.

If you wanna own your audiobooks you might wanna check out https://libro.fm/ - they allow you to download the bought audiobook without drm.
I gladly accept tips for similar sites when it comes to buying ebooks.

Eh, go for something simple like Fedora KDE and teach them how to update and install stuff through Discover - it’s like App/Play/Microsoft store + the System update all in one.
I imagine Linux Mint and OpenSUSE has similar GUIs to introduce if that’s more up your alley.

Update 22:51h: The vote originally scheduled for 14 October will not take place because there is no majority for the proposal. It is likely that the EU Commission will now propose to extend the Chat Control 1.0 regulation currently in force that permits providers to scan our messages (if they choose). An extension of this indiscriminate bulk scanning regime is not acceptable. Scanning under this regulation needs to be targeted and limited to suspects where requested by a judicial authority.

• https://www.patrick-breyer.de/en/citizen-protest-halts-chat-control-breyer-celebrates-major-victory-for-digital-privacy/

Made a screenshot of https://app.smartdraw.com/editor.aspx?templateId=384d7d86-2472-4f4d-b80f-224189376dc3&flags=128

Does this example match your network?

From your description it already sounds like all of it is in the same network?
That cabling you have in the house doesn’t split your network, Router -> CAT6 - CAT6 - CAT6 -> Switch is the same as Router -> CAT6 -> Switch as far as your equipment is concerned.

This is oversimplified but catches most network topologies (including yours it seems):
Internet -> Router -> Switches -> Client Devices

That and also man hour costs versus hardware costs. It’s often cheaper to buy some extra ram than it is to pay someone to make the code more efficient.

Isnt opnsense only for bsd? I am running linux.
opnsense is bsd based yes, you can either run it on it’s own hardware in front of your server or you can run it as a virtual machine and passthrough your hosts network ports to it for WAN/LAN.

When using a vpn server, only I could access the services right?

You can easily setup vpn users for friends/family but a random person on the internet won’t reach your services if you block access from WAN and forces everyone to go through the vpn server.

Your services would first of all need some sort of integration to report failed authentication attempts to your firewall or you wouldn’t have anything to act on to start the block. Sounds complicated edit: and also what fail2ban does by reading logs it seems.

If I were you I would ponder if it wouldn’t be easier to just setup a headscale/wireguard/openvpn server and connect to your other services through that.

My favourite home firewall right now would be opnsense