That's what I use, Caddy webserver with Gandi DNS (also used Route53 in the past) handling the ACME challenge and a `*.l.mydomain.tld` pointing to 127.0.0.1.
Adding reverse proxies for different local services becomes a piece of cake, but mkcert allows you to use `localhost` directly if needed. Personally I never have and like not having to make any changes to the trust store.
I have a Moto G 1st generation and put LineageOS [0] on it. Far better experience and much more free space.
Unfortunately won't help with making the camera better.
I don't think it does. That quote is from the section explaining how to configure "Password" authentication. i.e. to use Password authentication, you must enable it on the target server.
It then goes on to list how to use Kerberos or Public Key methods.
You are right, I missed the one liner above this that stated it needed one of these methods: [password, kerberos, or public key].
However, it does sound like if you use the docker image that you need password logins on the primary machine unless you modify the docker image to add a public key. I may just be reading wrong again though.
Reading again, it does look like the installation is limited in some way if you choose to use public keys and your user doesn't have the privileges (without sudo) necessary for some of Cockpit's commands it tries to run.
Note that when a user is authenticated in this way [public key] the authentication happens without a password, as such the standard cockpit reauthorization mechanisms do not work. The user will only be able to obtain additional privileges if they do not require a password.
I think the use cases there is more accurately, if the user doesn't paste into the first box AND copies the content, don't let them paste into the second.
I would paste into both boxes and resort to developer tools if I am not allowed.
That doesn't make it OK to remove a feature that people did use and like.
That feels like a bit of a slap - what if they decide to remove some other feature I like but other people don't use (e.g. the always allow zoom feature which I would not like to go without)
I have been watching the bazil project for a while - it's exactly the system I want. Still very alpha right now, so I don't (and one shouldn't) trust it with irreplaceable data.
