Yep I’m looking at system76. Not sure about how valid the 14h battery life claim is though. That seems awfully optimistic on a 10-core Intel chip.

That’s new info for me thanks. Never knew thinkpad can excel in this department.

Very good point regarding geoip, thanks!

Yea that’s basically the reason why I can’t use a VPN.

In fact there isn’t really a problem to leave your phone connected to the selfhosted VPN all the time. If split tunneling works properly, only traffic that access your home network would actually go through the VPN, all others will just get bypassed.

But in my case, I already need to be connected to another VPN most of my day, so can’t really go this route.

Well I’m trying to discuss when unable to use a VPN so….

Limited container access is a good point. Noted.

I think the APP itself is fine, but would an API access give attackers a mean to brute force into it? Sorry no expert here.

The official wiki talks about securing password login with fail2ban. I guess this is not needed in my case, as it’s handled at the Authelia level.