Reported

Firefox for Android partially supports PWAs.

Define “insecure”.

What security problems?

What’s wrong with exposing Jellyfin to the internet?

Same.
The time it takes me to write a single function in Python is the same as writing a whole Bash-script using nano.
Also I initially set up my homelab using Docker in a VM on Proxmox. Totally useless abstraction, but I never found the time and patience to migrate the VM to bare metal.

Nextcloud, hands down.

I use Borg to backup the default volume directory and my compose files. If you’re interested I can share my backup script.

While that’s an easy solution it makes it impossible or rather difficult to restore single containers and/or files.

I’m using a cheap VPS that connects over Tailscale to my home server. The VPS runs Nginx Proxy Manager, has a firewall and the provider offers DDOS protection and that’s it.

Take a look at Nginx Proxy Manager and how to set it up. But you’ll need a domain for that. And preferably use a firewall of some sort on your server and only allow said ports.

Or just install the browser add-on.

Hetzner Storagebox

It’s pretty straight forward:
https://wiki.archlinux.org/title/NFS

Maybe you can create an NFS share on your remote system and mount it on your local system, then create a Borg repo there as usual.

Borg backup all the way.

Not sure how lightweight it needs to be, but I use Ghost and it’s pretty simple and basic.

An initial library scan with 19k assets: 1m40s down to 9 seconds.

Insane!

Jellyfin is pretty nice for music too. I use it with Finamp, an Android client.

After changing the MTU to 1200 I have no timeouts anymore, but a lot of read ECONNRESET errors. -.-