I don’t think it would’ve been an issue if they just put a warning in the getting started section in the docs (or if they just have secure defaults to begin with). But currently there’s no mention of it. It took almost a year for me to realise that I was running “production ready code” in root

You can run docker without root as well with docker rootless

Maybe you can use some client to navigate your share in a more pleasant way instead of hosting something new? I never tried that so I can’t recommend anything for that unfortunately

If you are already hosting Nextcloud, the Memories app might fit your needs well.

Immich definitely isn’t a bad option either. It doesn’t take ton of resources, has a clean user interface and is multiplatform. Just like Coolie4 said, you can just try it out with a small collection first before committing to anything.

If you don’t want them on cloud providers because you’re not comfortable them being able to see those pictures, you can also pay for Ente.

Self hosting Ente is also an option, which is what I use for my family

You might also be able to get away with hosting something like Seafile and use directories as albums. But you won’t get random shuffling in that case (My bad I can’t read. This isn’t much better than what you’re doing currently)

Don’t tell me you actually read through the millions of lines of driver code in the Linux kernel

The Bitwarden client, extension and app keep those locally as well. So unless you have a prolonged power outage, you should be fine. Though if you don’t have anyone you need to share passwords with I’d recommend KeepassXC with Syncthing. You can set keybindings with the browser extension

Heyhey, nice overview, though on the “just works” thing on atomic/immutable distros I want to say that that’s not the case by virtue of a system being atomic.
I’m on Fedora Atomic (which Bazzite layers on) and the codecs you’d expect being on there aren’t because of licensing (just like all of Fedora’s distros).
I also don’t believe Fedora Atomic does anything in particular in regards to drivers. So the advantages you’re talking about are there because of the people who worked on Bazzite.

On breakage, it’s definitely not a bad thing for a system to *gently* push users into installing software in user space and with some isolation, but it’s far from a requirement for a stable system.

And if you’re going to be layering everything anyway (so installing basically only installing using rpm-ostree), you’re not gaining much by choosing an atomic distribution. Those layers can conflict like with any other distro packages

Fedora KDE, which I ran for almost a year, has not given me any issues except for the codecs which I had to install myself.
It’s actually more of a pain to get codecs to work on Fedora Atomic because of how RPM Fusion needs to work with layering (https://rpmfusion.org/Howto/OSTree), which wasn’t an issue on standard Fedora.
So you’ll end up needing to manually updating the repository RPM Fusion repository every 6 months.

Also some software, like Steam, is also a pain to work with when using the Flatpak. \

VanillaOS (which *doesn’t* use rpm-ostree since it’s based on Debian) and Bazzite are both good atomic distros if you really want that, while having those kind of annoyances handled for you.

It’s fairly clunky. The developer is a nice guy and responds really quickly, but files sometimes didn’t sync and I got an error twice where it just completely stopped syncing.

There also isn’t a proper setup guide or documentation (but you can always add the help flag halfway through your jar usage to know what parameters you’re missing). The developer has been kind enough to help me through that though.

It might just be a skill issue on my end of course. Though needless to say I moved back to something else after a couple of months (In my case to Seafile)

Also its Dutch translation is acceptable (I did that)