Zarlin

No full guarantee, but scanning all downloaded files using a tool such as malwarebytes can help catch a lot of malware.

And ofc the most important one: Common Sense! If something seems too good to be true, it probably is.

This is the currently maintained android version: https://github.com/researchxxl/syncthing-android

Since she likes puzzles, the Trine game series could be nice! I think they added coop multiplayer starting with Trine 2.

If you both like hack 'n slash then Torchlight 2 is also great fun!

https://vikunja.io/ work very well, and can be used as a PWA

Take a look at Bunny ( https://bunny.net/dns/ ), they’re based in Europe with worldwide coverage, and have a lot of other useful services as well.

And it’s fixed :)

Most visual novels should suffice if you like those. VA-11 Hall-A is great (though best if can hold a drink in the other hand)

Oh, and point-and-click adventure are usually also controllable with just a mouse.

I think I can create a CNAME record for *.media to point to the Tailscale address of the reverse proxy

This approach, but if you setup your server to advertise subnets you can use your local IP range instead of tailscale’s. Port numbers for individual services would be handled by your reverse proxy, you can setup a subdomain route for each service.

Instead of having to keep track of bookmarks you can use something like homepage on the root of your domain, as a dashboard to navigate to all other services.

My setup just has the local IP (of the reverse proxy) in the domain’s DNS records, and I have Tailscale on my home server setup to advertise subnet routes, so I can use the same local IP when at home or remote via Tailscale. No need to use your public IP or open ports or anything.

From the product page:

A hardware kill switch; disconnected completely the microphone and cameras at the circuit level, leaving nothing open for intrusion.

• Tailscale for external access, this is extremely convenient.
• Namesilo for domain (cheap but otherwise not really recommended)
• Bunny DNS (because NPM’s certbot doesn’t support Namesilo). Still looking at their other services, overall it seems nice.

Still looking at an external backup solution like Backblaze or Hetzner

If you’re ok with doing some selfhosting, a DNS filter like PiHole or Adguard Home should take care of those. A nice bonus is that these can also block most in-app ads :)

If you setup a VPN like Tailscale you can even make your phone traffic go through a DNS filter you serve at home, so your privacy is always protected.