Reviving a neglected modded Switch with Fedora, RCM payload injection, a major firmware update, Jellyfin streaming and homebrew troubleshooting.

What I am actually defending against by self-hosting, what I accept instead, and why a written threat model stops scope creep in the lab.

How I passed the Intel GPU into both containers, enabled Quick Sync, proved a real Jellyfin transcode and checked Plex’s hardware path.

A practical way to carry an isolated Wi-Fi network across OpenWrt, managed switches and a UniFi access point without moving device management onto that VLAN.

What I learned while connecting Jellyfin and Navidrome to Authentik without breaking native media clients.

How I handled different numeric identities across Docker and TrueNAS without renumbering established users.

How to separate folder connections, exclude unsuitable data and diagnose a Nextcloud desktop sync that will not settle.

A practical checklist for changing a server hostname without leaving backups, SSH, monitoring or remote access pointing at the old name.

How a health script can run successfully while publishing an empty report, and how temporary files, validation and freshness checks prevent it.

A backup is not complete when the command exits: verify the snapshot, repository, monitoring and a representative restore.