Doesn’t look too bad for me

I think the cost of all the additional wiring and components would outweight the benefits.

What if the sun isn’t shining? You would need a heat pump that can use AC and DC. What if the sun is shining, and the water is hot enough? Your PV would need DC cabling and a converter to AC to send power to the grid. And all these components would need some switches etc.

It’s just easier to have all your home run on AC.

AFAIK completely without ads. This is the first sentence from the link I provided in my previous comment:

Meta will offer people in the EU, EEA and Switzerland the choice to pay a monthly subscription to use Facebook and Instagram without any ads

They want 10€ from EU citizens to not show ads, but it is doubtful that this is legal.

I don’t think text makes any sense. As you can see, we have three ways of writing “euro”.

You’re right, these are definitely some advanced topics. But no need to know everything yourself, if you stumble upon one of these topics during your research, you might want to post them here.

Yes, that is why many big tech companies have their european hq there.

Edit: Wikipedia on Ireland as a tax haven

I believe there are several Linux-related topics that could be valuable for this cybersecurity community. While I’m not a Linux expert, here are a few suggestions:

• Security features in the Linux kernel: An overview of features like ASLR and cgroups, including their strengths and limitations.
• Securing Linux servers: Practical guides, how-tos, and tools (e.g., Auditd, Sysdig) for hardening Linux systems.
• Vulnerabilities and detailed writeups: Sharing in-depth analyses to learn from real-world mistakes. (But please, let’s avoid posting every CVE. 😉)

You’re right, Google released their vision in 2023, here is what it says regarding lifespan:

a reduction of TLS server authentication subscriber certificate maximum validity from 398 days to 90 days. Reducing certificate lifetime encourages automation and the adoption of practices that will drive the ecosystem away from baroque, time-consuming, and error-prone issuance processes. These changes will allow for faster adoption of emerging security capabilities and best practices, and promote the agility required to transition the ecosystem to quantum-resistant algorithms quickly. Decreasing certificate lifetime will also reduce ecosystem reliance on “broken” revocation checking solutions that cannot fail-closed and, in turn, offer incomplete protection. Additionally, shorter-lived certificates will decrease the impact of unexpected Certificate Transparency Log disqualifications.

If you measure from the surrounding area, the Mauna Kea is higher than Mt. Everest.

Sorry, I understood you wrong. You’re right!

Nothing of value was lost when EV certificates disappeared.

even more secure with the 90 days policy.

Yes, if you do this manually it will work.

I meant certbot with nginx plugin and http-01 challenge.

You’re right, ssl.com offers this, too.

IMO, sticking to manual processes that are error-prone is a waste of money and not a sign of a honest business.

Yes, it can be easier. But not every DNS provider allows API access, so you might need to change the provider.

(good luck with that in many enterprise scenarios).

I’ve set it up fully automated with traefik and dns challenges.

Letsencrypt issues wildcard certificates. This is however more complicated to setup.