firewalla VS immich

firewalla is open source https://github.com/firewalla/firewalla

Just to follow up because I think I misread OP—they’re looking at Firewalla who publishes their source on github, and it looks a lot like your classic FOSS firewall running suricata and probably doing DNS-based filtering. I bet if you dig into their source you’ll find dnscryptproxy, unbound, or dnsmasq with filter sets.

Using the Firewalla VPN Client for a 3rd party connection is one way. What this means is that devices on your network can initiate connections through the VPN to external addresses, and those external addresses can respond and make use of the established connection (ex: your machine uses a browser to request the webpage https://help.firewalla.com through the vpn connection, and the server hosting the webpage receives the request and is able to respond, by sending the requested webpage)

search https://help.firewalla.com you will find more articles on this topic. And if not, the communitly likely have more https://help.firewalla.com/hc/en-us/community/topics/360001948014-Expanding-Firewalla-Docker-Third-Party-Apps-Scripts-

there are a few threads https://help.firewalla.com like this https://help.firewalla.com/hc/en-us/community/posts/4411622449811-Omada-Controller-Docker

From my understanding zeek does the inspection (probably not https / tls ) and generates alerts (internally) which Firewallas software (https://github.com/firewalla/firewalla) picks up and analyses then throws out alerts / blocks as they see fit.

Technically yes, but also maybe no. Firewalla's software is open source. You can download and modify it on GitHub. If you really wanted to, you could fork it and strip out all of the firewalla-specific code (ie licensing, app integration, etc.) and replace it with your own code.

It really is hard to leave Gmail when all of your data has been conveniently stored therein. This is one of Google's retention strategies and it is indeed brilliant.

That said, there's a vast number of self-hosted alternatives like Stalwart Mail (email) [1], Immich (images) [2], NextCloud (Google Docs) [3], etc.

[1] https://stalwa.rt

[2] https://immich.app

[3] https://nextcloud.com/

Last year we added CLIP-based image search to https://immich.app/ and even though I have a pretty good understanding of how it works, it still blows my mind damn near every day. It's the closest thing to magic I've ever seen.

I’m a big fan of https://immich.app/ and I use it every day for thousands of assets

Real-world applications often require complex queries that go beyond simple Approximate Nearest Neighbor (ANN) search. To explore a practical example of such applications, let's take a closer look at immich, a self-hosted photo and video backup solution that highlights the importance of advanced vector and traditional relational queries.

I discovered these 3 amazing projects recently:

Cryptpad, essentially google docs/sheets/forms e2e encrypted. It does include collaboration. https://github.com/cryptpad/cryptpad

Immich, google photos self hostable, with share options https://github.com/immich-app/immich

Nginxproxymanager manages certificates and proxies to self hosted stuff through nginx https://github.com/NginxProxyManager/nginx-proxy-manager

Great self hosting stuff!

I realize it's very hard, but can we maybe reconsider opening the encryption-at-rest feature request? https://github.com/immich-app/immich/issues/450

Maybe we can give temporary access to processing steps in the pipeline, then have Immich forget the keys after it does the processing?