A4-6210 with build in GPU has TDP of 15W. There is no point to optimize anything it is seeping power already. may be try to use tlp to limit max charge level of the battery ( i’m not sure is you laptop is supported). You can play with governors too, but I personaly will not bother. You obviously need multiuser.target but not GUI.

Bump root cert to 10 years and use intermediate with shorter lifetime. root cert should be stored and processed off net.

It would be useful to know laptop spec. In general, do not bother power consumption should be lower enough as it is.

Why create yourself a headache and still get substandard and no-warranty drive. If you want cheaper drives go for reconditioned/refurbished/used drives. Same risks, better product. Old enterprise SAS drives are cheap and many still have plenty of heath in them.

Just weight your risks. Old drives can fail early, and enterprise drives consume more power. Old drives probably not for mirrors or RAID5. RAID6 and spare HDD on shelf may save your data one day. It is a lottery.

Specks lookg good, Intel NIC, semi decent CPU. I would say it is even overspec for a router.

It is an option. But used from Ali? I’m not sure that I would trust them with my data.

Thank you. Intel now offer ECC on top processors like i7 and i9. It is a news development. Now biggest problem is to find motherboard supporting ECC.

could you please elaborate? what is SFF hardware?

Try other container technologies lie LXC or go right side and play with FreeBSD jails. Quality of dockers you can find around is horrendous, giving that Docker itself build for convenience not security. It is not something I will trust.

HIkvision is great. Good value for money. Just do not use the app to configure them, use web gui. And yes, they need to be isolated from rest of network and the internet ( as pretty much any cameras).

Just get VPS and use it to bounce traffic between nodes.

Blu Tac?

But it usably getting dry over time and you can’t remove it cleanly.

Ethernet is not a problem. Plug USB-to-Ethernet adapter to your phone ( there are some requirements to both) , and you will be surprised.

Is it tame for selfhosted to switch to DANE?

Symphonium is another good mobile client.

Do not access volumes directly on filesystem. path may change. If you need access data on a volume just spawn temporary container an mount that volume.

you can always add Makefile to traverse directories.

Damn, I’m doing *nixes for nearly 30 years. But never went to that level of minimalism. Nice trick.