Something you might want to look into is using mTLS, or client certificate authentication, on any external facing services that aren’t intended for anybody but yourself or close friends/family. Basically, it means nobody can even connect to your server without having a certificate that was pre-generated by you. On the server end, you just create the certificate, and on the client end, you install it to the device and select it when asked.
The viability of this depends on what applications you use, as support for it must be implemented by its developers. For anything only accessed via web browser, it’s perfect. All web browsers (except Firefox on mobile…) can handle mTLS certs. Lots of Android apps also support it. I use it for Nextcloud on Android (so Files, Tasks, Notes, Photos, RSS, and DAVx5 apps all work) and support works across the board there. It also works for Home Assistant and Gotify apps. It looks like Immich does indeed support it too. In my configuration, I only require it on external connections by having 443 on the router be forwarded to 444 on the server, so I can apply different settings easily without having to do any filtering.
As far as security and privacy goes, mTLS is virtually impenetrable so long as you protect the certificate and configure the proxy correctly, and similar in concept to using Wireguard. Nearly everything I publicly expose is protected via mTLS, with very rare exceptions like Navidrome due to lack of support in subsonic clients, and a couple other things that I actually want to be universally reachable.












I’m a socialist and I agree with them.
The reality is that not everyone wants to own and maintain their current home, for a variety of reasons. So long as homes are commodified, which they effectively will be for the long-term forseeable future until we live in a true post-scarcity society, renting a home will be a necessary option that a functioning society must provide. Building housing is expensive in terms of labor and resources, and that labor must be compensated somehow, and not everyone will want or be able to front that entire cost. Or maybe they simply don’t want to settle down permanently where they are now, or even ever, and therefore homeownership would saddle themselves with unwanted debts and the trouble of selling the home when they do move.
The flaws we see in modern day landlords are largely a function of capitalism. Housing is a necessary resource for survival, but one that we’ve rendered artificially scarce through social and economic policy inflating the price, and then it gets bought up by the only people who can afford it and rented out to those who can’t. There’s nothing inherently wrong with, for example, a worker-owned cooperative leasing out housing and providing maintenance services at a fair price for those homes for people who don’t want to do it themselves. Ownership alone isn’t a job and such rentseeking would be forbidden in a sane and just society, but under a better system there would still be room for such a service that provides genuine value to society.