Exactly this. It checks periodically if a newer image for the tag of the container is available (e.g. vaultwarden:latest) and tells you about it. You can setup mail, sms, Teams, you name it.

So then you know a new version is available, can check the changelog and decide if the update is worth it.

Personally having great results with Diun. Same idea (check for newer container image) and works 100% for me.

Don’t know if it can automatically load and restart containers, rather do that personally.

Do you have requirements for the WiFi Standard?

Do you want to build up a new system or adding to your current setup?

For the price point you could look into the AVM Fritz Ecosystem. Their Mesh solution is quite hassle free and for 200€ you could get WiFi 5 capable devices on the used market.

Not sure how well they work with other brands, so you might want to invest in a FritzBox and FritzRepeater (should be in the budget used).

Anything above WiFi 5 could be out of your price range, especially new.

Ubiquity APs with WiFi 5 could be in your budget, even new. Look into the AP HD. You will need a controller installation though, weither on your desktop or on a NAS, Server. You do NOT need to buy an appliance from them for management. They do not make it clear on their website.

They have the management aspect of large environments down to a tee. Apart from costs it does not really matter if your domain consists of ten, thousand or more systems. The tools to manage those systems centralized by core systems is the same set for all sizes so to speak.

That can be on one campus, across multiple cities and locations. It’s quite frankly IMO the foundation on which the success of Windows in the corporate world is built. Standardized deployment of settings across all company systems saves administrators time which can be used for other tasks instead of micromanaging clients.

I have yet to see a similar solution for Linux clients that works the same way.

Not really the way if one wants to cut ties with Microsoft completely though. And I suspect most would argue „then you can go the Windows route all the way and have less pain integrating client systems“.

Oh, Ansible is an interesting starting point. Would not thought of it for that purpose, I always „only“ link it mentally to automated deployment.

Will look into it out of curiosity.

How do you manage your fleet? How big is your network?

I‘d love to push for Linux at work, but have yet to see a solution with similar management capabilities than a Windows domain. And I don’t want to manage individual clients, as sysadmin I want to push templates like GPOs and the like.

Can see it work for smaller environments, but not in a company with a couple hundred machines.

Yeah, same with forcing ISPs to save connection data on all users long term. European court slapped on the hands a couple of times, still not done. Like some kind of undead policy

To add on this: removed because it was clear the vote would not have been in favor.

Was pretty clear that it would return sooner rather than later.

Must haves IMHO:

uBlock Origin Consent-o-Matic

Making life easier:

SponsorBlock Enhancer for YouTube DarkReader Multi Account Containers

At the end of the day it is a matter of preference and convenience. Is it safer to separate them? Absolutely. Is it as convenient as keeping them in one place? Absolutely not.

So, pick your poison. Personally I have my MFA tokens in three separate locations, two self hosted server applications and in a mobile app (2FAS Auth). More for fallback/backup reasons. Having them in my password manager is just too convenient.

Well, there is in the EU, but that does not help anyone not here.

An unlocked boot loader is something that would have to be forced from Apple’s hands like sideloading was in the EU. No way in hell they would pursue that on their own.

Rapairability is a point that bugs me as well, hoping for right to repair laws in the EU to force all manufacturers to make the devices better in that regard.

Basically a pair of bouncers at the door to your Home Network whose specific purpose is to manage the flow of guests from outside (the internet) to your club (media server with library).

In regards to stock systems, I agree.

Been stuck in the convenient ecosystem for a while, and I cope by telling myself Apple makes the bulk of its money with hardware and services. Not ads like Google. But if I would start over from zero, I think Graphene OS and Linux would be the way. But migrating the whole family away from our current Apple line up - I dread that challenge.

If you want to take a step in between: I am running Debian Testing on my notebook. Testing is the staging ground for the next major Debian Version, right now 13.

Still very much stable, but inherently more up to date packages. Not a real rolling release, but the closest you can get to a rolling Debian. Plenty of updates, but no problems in the past year I used it.

Pretty happy with Debian Testing. Frequent updates but still very stable and rock solid.

This is the closest to a rolling Debian release, and I really like it. It’s basically the next major release for Debian, Updates are plenty and the packages much newer than in the stable, though not bleeding edge.

Best of both worlds IMHO

No, so far no bugs worth mentioning. All works well, apart from more incoming updates than usually on a Debian System.

The problems I ran into were mostly with GNOME and Hotkeys for Apps in Wayland. Like Shift + F12 to open a Terminal does not work reliably when set in the Terminal app, but works well when set in the Gnome Settings as a global Shortcut. But I would file that under annoyance rather then a serious bug.

To add to this: Debian is pretty conservative in regards to package versions. The current and LTS versions usually have slightly older packages.

If you don’t mind tackling more updates, I suggest Debian Testing. That is the stable development branch for the next major release, currently rocking it with Wayland GNOME on my DELL notebook and very happy with the results.