Max-P

LineageOS’s default music app, Twelve, supports Jellyfin as a source:

For the most part, this happens because those programs check if stdout is a pseudo-terminal (pty) and automatically disable color output because if you’re doing say ls -l and try to parse it, you’ll have all the ANSI escape sequences mixed in, so for safety and predictability they disable color.

It is unfortunately a per-program thing. It is possible to fake it using script or unbuffer according to https://stackoverflow.com/a/32981392

Looks like socat can also be used for that: https://unix.stackexchange.com/a/157463

As someone that admins hundreds of MySQL at work, I’d go with PostgreSQL.

7 days currently, 30 days on the previous boot. I had to open it up to install extra drives.

Yeah, that didn’t stop it from pwning a good chunk of the Internet: https://en.wikipedia.org/wiki/Log4Shell

IMO the biggest attack vector there would be a Minecraft exploit like log4j, so the most important part to me would make sure the game server is properly sandboxed just in case. Start from a point of view of, the attacker breached Minecraft and has shell access to that user. What can they do from there? Ideally, nothing useful other than maybe running a crypto miner. Don’t reuse passwords obviously.

With systemd, I’d use the various Protect* directives like ProtectHome, ProtectSystem=full, or failing that, a container (Docker, Podman, LXC, manually, there’s options). Just a bare Alpine container with Java would be pretty ideal, as you can’t exploit sudo or some other SUID binaries if they don’t exist in the first place.

That said the WireGuard solution is ideal because it limits potential attackers to people you handed a key, so at least you’d know who breached you.

I’ve fogotten Minecraft servers online and really nothing happened whatsoever.