it’s on by default

It may well be on by default now. I just know I had to enable it the last time I looked at this.

what do you mean by lockscreen bypass software

Tools such as those provided by Cellebrite and similar.

Lockdown mode is mainly to disable biometrics, to prevent someone on the street forcibly using them to unlock your device. It’s not going to stop an entire agency with more sophisticated tools.

Or at the very least; turn your phone entirely off (shutdown) whenever you expect or encounter police contact.

Biometrics only work when the device is already running. Mobile devices are in their most locked down/secure state when ‘at rest’, ie shutdown.

In android; there is also a ‘lockdown’ mode you can quickly activate from the power off screen, that disables Biometrics until next unlock with a pin/pattern, but doesn’t fully shutdown so you can still quickly access things like the camera. This has to be explicitly enabled in settings first and will not offer much protection from various lockscreen bypass software available to law enforcement.

The phrasing in your previous comment comes across very rude to someone that’s just trying to provide a solution for you. There’s better ways to ask for clarification.

I apologize if hostility was not your intention; but, food for thought.

Yup, and if you opened the webpage within a VM, you could easily screenshot it without the DRM blacking it out for you.

You’re in a piracy community asking for tips on pirating content. If you’re going to be an asshole when they’re given to you; you’re welcome to fuck off somewhere else.

A lot of DRMed content that prevents screen recording can be played within a VM, with the host recording the display output window.

Or so I’ve heard…

yt-dlp

I don’t know why I avoided this for so long and stuck to whatever the first search result for ‘online youtube downloader’ was; but it’s been much nicer having a consistent and versatile tool at the ready.

Perfectly happy to pay artists for their work; entirely unwilling to pay the scum that aggregate and charge for access to that art, with countless strings attached.

Bit old, but pretty much everything Source Engine is self-hostable isn’t it? Most of them even come with a pre-configured SRCDS (SouRCe Dedicated Server) you can download and run right from the steam launcher.

I know I ran a GarrysMod server for quite a while; piling a shit ton of mods on it. Plus any source game you’ve got installed, Garrys Mod can and will use the resources/assets from.

:/ shit.

I’m pretty sure I saw this a few months ago and moved to the beatkind/watchtower fork, but it’s not been updated in 6mo either. (Devs only been active in private repos; so they’re still around, just not actively working on watchtower)

Guess I’ll find another solution. Hell, I might just put my own script on crontab. Looping through folders running docker compose down/pull/up isn’t too hard really.

My wife got very upset. Apparently she likes the ads.

Set static IPs for her devices, then whitelist that device IP past the block lists by adding it to a group, then regex allow domain: ‘*’ for that group.

A bit of redundancy is key.

I have my primary DNS, pihole, running on an RPI that’s dedicated to it; as well as a second backup version running in a docker container on my main server machine.

Nebula-Sync keeps the two synchronized with eachother, so if a change is made on one, it automatically syncs to the other. (things like local dns records or changes to blocklists).

If either one goes down (dead sd cards, me playing with things, power surges, whatever); the other picks up the slack until I fix the broken one, which is usually little more than re-install, then manually sync them using piholes ‘teleporter’ settings. Worse case, restore a backup (That you’re definitely taking. Regularly. Right?)

Both piholes use Cloudflared (here’s their guide *edit: I see I’ll have to find a new method for this… Just going to pin the containers to tag ‘2025.11.1’ for now) to translate ALL dns traffic into DOH traffic, encrypting it and using the provider of my choice, instead of my ISP or any other plain DNS. The router hands out both local DNS IPs with DHCP because Port 53 outbound (regular dns) is blocked at the router, so all LAN devices MUST use the local DNS or their own DOH config. Plain DNS won’t make it out.

DNS adblocking isn’t perfect, but it’s a really nice tool to have. Then having an internal DNS to resolve names for local-only services is super handy. Most of my subdomains are only used internally, so pihole handles those DNS records, while external DNS only has the records for publicly accessible things.

I have the same issue with Immich on android. It pretty much never uploads files until I manually open the app; then the app refuses to acknowledge it has uploaded those new files until it’s closed and re-opened :( (power saving is set to un-restricted in android, and background data usage is allowed. I’ve been through troubleshooting very thoroughly, it just doesn’t work)

FolderSync has been the only reliable (non-root) backup solution I’ve used. It’s set to monitor my image folders for changes and upload any new files as soon as they’re created; this works ~85% of the time. Then, It’s also set with a few schedules to check for changes every 3hrs, backing up everything on the phone the app can access; this catches anything the on-change/on-creation file detection misses, while also backing up more data than just my images. I have yet to see that fail after ~3 years.

Plex, Emby, and Jellyfin are all legal, and each have ways to serve liveTV alongside your own locally stored content, and DVR that liveTV if you want. You’d just have to purchase a liveTV subscription from your local provider (or go the Pirate route ofc).

Emby has what they call ‘Emby Connect’ which is entirely optional and is basically a glorified DNS service.

It doesn’t proxy connections, it just passes on the hostname to the client. The server is still required to setup port forwarding or other routing like tailscale or a proxy on a vps.

Emby Connect will let you sign into your local server using your emby.media credentials, but unlike Plex it’s completely optional and only works once explicitly linked to the local user of an Emby server.

I only bring it up because you explicitly said you have no idea why it doesn’t work.

Take things at a comfortable pace; there’s no sense overwhelming yourself. Then you just forget what you’ve done and end up lost in your own maze.

I started with Plex myself, almost 10 years ago. Moved to Emby, where I learned about buying a domain, setting up ssl through a reverse proxy, and just continued to explore from there. Today I run ~26 containers/projects across three systems and I’m always keeping my eye out for interesting new things.

Best of luck with your journey m8.

Sounds like you’re behind cgNAT, which essentially means there’s another router owned by your ISP that’s between yours and the open internet, which also requires port forwarding, but your ISP will never do that for you.

It complicates things, but the solution(s) are tools like tailscale, cloudflare Tunnels, or to rent a VPS just to host a proxy/vpn.

Plex solves this by using their own public servers as a proxy for you, but this is part of how they have control over your users/server/data, such as blocking remote streaming… That makes more than a few people uncomfortable.

Plex centralizes authentication at plex.tv

When a user wants to connect to a ‘private’ plex server, they must first sign into their plex.tv account, which then provides the auth token needed to login to the users server (even if both the client and server are on the same lan)

With this system, Plex can monitor and control every single connection to every plex server; limiting access to whatever they want. Even your own local content.

Plex has an automatic proxy service hosted by their public servers. If you haven’t or can’t configure port forwarding correctly, plex will route the connection through their own servers.

The problem is, that also means Plex co has total control over your server and the data sent between it and clients if they so choose. Anything from quietly logging the data sent back and fourth, to controlling who can connect and what they can do while they are.

Jellyfin has to be correctly exposed to the internet via port forwarding or tools like tailscale/a vpn; but it’s entirely your server under your control. You have ultimate control over how your server can be accessed, but that also means you’re responsible for actually setting that up.

Major version changes for any software from the OS right down to a simple notepad app should update as sequentially as possible (11>12>13>etc). Skipping over versions is just asking for trouble, as it’s rarely tested throughly.

It might work, but why risk it.

An example: if 12 makes a big database change but you skip over that version, 13 may not recognize the databases left by 11 because 12 had the code to recognize and reformat the old database while that code was seen as unnecessary and removed from 13.

Stuff like this is also why you can’t always revert to an older version while keeping the data/databases from the newer software.

Typical piracy requires you to search sources/indexers yourself, decide on the best search result for what you’re trying to download, pass that to your download client, then manually name and sort the downloaded files into media folders once the download completes.

The arr’s automate this entre process for several media types (movies, tv, music, etc), combining search results from dozens of indexers to make its decision on what to download.

Now, I open a webpage, search for a movie/show (results from imdb) and select an item I want to watch. ~15min later, that item has been found, downloaded, and sorted into my media folders where Emby/Jellyfin can display it to myself or friends.

Add on to this with Ombi, a requests platform that allows my friends+family to request media and have the arrs automatically grab it. Since setting that up a little over a year ago, it’s filled almost 400 requests (not including media I’ve grabbed/requested myself) without me having to manually manage requests ever.

Ontop of grabbing media on request, the arr’s also monitor the sources you’ve configured, watching for new uploads, and grabbing content that’s missing from your library but monitored for, such as: newly aired episodes, media that couldn’t be found earlier, or upgrades in quality for existing media (if configured/allowed to upgrade existing media).

Every time a new episode airs for a show I’ve added, it automatically grabs it for me. (currently 486 series monitored here)