You’ll want a GPU with hardware encoding and decoding for popular codecs. Most GPUs these days do that, even the budget ones, but you do need one.
Minecraft servers want fast single core CPU performance and a decent amount of RAM.
The rest of it could be RAM hungry too.
You’ve basically described ufw which is a firewall tool available on many Linux distros.
I have my Immich instance setup with an nginx proxy for security and ssl, and that’s exposed to the internet. I have a domain for my personal website, so I just put up my Immich instance at a subdomain of that. I can now make public share links I can just copy and paste into a group chat. I haven’t added any other users yet but I’d I wanted to all they’d need to do is login via email/password.
This is an officially supported kind of setup for Immich, so I would consider it secure: https://docs.immich.app/administration/reverse-proxy/
I don’t have all of my homelab services exposed publicly though; I VPN in for those.
General tips for exposing a server to the internet:
Ofc it’s going to run Linux, it’s default OS is going to be some variant of SteamOS
I have an Nvidia GPU and I’ve been able to get HDR working on Linux (Bazzite gnome) with some tweaking for specific games. I haven’t really tried watching movies with it yet.
Specifically the 2 instances that everybody blocks, and it’s mostly fans of those two instances that complain about it.
Further down the Wikipedia the most recent rebrand from OS X to macOS was in 2016.
Still, seems fishy to me that 20% of the market share would be running a 10 year old OS…
What’s the difference between “OS X” and “macOS” on this chart?
Surely 20% of the market share isn’t Mac’s that are so old their OS is over 10 years old? I don’t know how else to interpret that…
Use Steam for SteamInput even if you get your games from Somewhere else.
These are an actual AR computer thing instead of just a hidden camera
Samba.
Or one time I made my own simple file sharing website
It probably isn’t going to cost less to get something without wifi.
Keep stuff that’s not designed to be exposed to the internet on your LAN behind your router’s firewall.
Use a VPN to access your LAN remotely. Tailscale is the easiest way to do this, but I found it not too hard to set up WireGuard.
I just selfhost bare git repos on an ssh server
I recently upgraded from a 2018 model to a 2025 one. The 2018 model was USBC only but the 2025 one supports both USBC and MagSafe.
Honestly I kinda like it. I prefer the magnet but if another USBC charger happens to be more convenient I can just use that instead.
I already launch most controller-based non-Steam games I own through the “add a non-Steam game to Steam” feature because Steam Input is the best game controller driver/manager I’ve used and it’s not remotely close.
Somebody do this to Minecraft
It is a lot more like water than you think. The solution of “just cut the circuit” is like solving the problem of overflowing storm drains by “just plug the pipe”.
The power has to go somewhere. If you don’t do anything about it, the voltage in the cables will rise until things start to fry. Real world power balancing involves adjusting the output of power plants (e.g. how much fuel to burn) in response to changes, and in some cases, dumping power into the ground as safely as possible. This problem gets complicated when power grids span vast distances and involve many different power plants that all need to be in sync or things catch on fire.
In the case of solar power, this is part of why improved large-scale battery technology is so important. It lets you absorb the excess power at peak generation times, and then release that power at night.
I have bash scripts of the form
rsync -av source destfor this. Make it -avz if copying over a network.