Right now none of the native clients support SSO. It is a frequently requested feature but, unfortunately, it doesn’t look like it will be implemented any time soon. As with many OSS projects it is probably a case of “you want it, you build it” - but nobody has actually stepped up.

For web access, stick it behind a reverse proxy and use something like Authentik/Authelia/SSO provider of your choice to secure it.

For full access including native clients, set up a VPN.

As a developer myself I’m not sure if I would trust any application to safely handle a configuration that has become invalid due to a breaking change, especially not an app that is still under active development! Better safe than sorry.

Immich has completely replaced Google Photos for me, love it!

My only bugbear is that it is updated very frequently (what a nice problem to have!) which in my case requires a manual once-over of my docker-compose file every time in case there are breaking changes.

I decided to set up Fedora on my new laptop as it was either take a chance on that or spend like 3 hours debloating a Win11 install.

It’s been over 10 years since I last tried dailying Linux, we have come a long way in that time. Everything just worked out of the box. No fucking around needed.

Even relatively niche stuff like my thunderbolt dock and the laptop’s fingerprint sensor was picked up. And, thanks to the investment Valve has been putting into Wine and Proton, pretty much every game I’ve tried has worked with no issue.

Next time my desktop is due for a clean install I’ll definitely be doing the same there.

Not exactly crazy but just mysterious…this was at a software company I worked at many years ago. It was one of the developers in the team adjacent to ours who I worked with occasionally - nice enough person, really friendly and helpful, everyone seemed to get on with them really well and generally seemed like a pretty competent developer. Nothing to suggest any kind of gross misconduct was happening.

Anyway, we all went off to get lunch one day and came back to an email that this person no longer worked at the company, effective immediately. Never saw them again.

No idea what went down - but the culture at that place actually became pretty toxic after a while, which led to a few people (including me) quitting - so maybe they dodged a bullet.

I use both. Pi-hole running in a docker container on one of my home servers which my gateway is configured to assign as the default DNS for all clients, and uBlock Origin on all my browsers to catch everything else.

Pihole is pretty good at catching ads on platforms that are not suited to browser based blockers (IoT devices, streaming boxes etc) but it isn’t perfect and is best used in conjunction with another solution.

Sony-Ericsson W350i. Had it for about a year before I got my first Android device, an HTC Hero.

BeamNG. Logged hundreds of hours just mindlessly driving around crashing into stuff and fucking around with vehicle customisations.