I suppose you can’t know that, but your odds on betting on a whole industry are better than a single company. Not to mention, the barrier to entry for a registrar becoming accredited really isn’t that high, so I wouldn’t expect market consolidation unless ICANN changes the process, at which point shit is fucked regardless.

If you have your own domain, you aren’t stuck with your dependencies. Swapping registrars is a straight forward porting procedure. Swapping hosting is a matter of replacing 5 or so DNS entries. It took me about 20 minutes to reconfigure my domain’s email when I decided I didn’t want to use Proton anymore.

Exactly why WAPs, Switches, Firewalls, and Modems should all be separate devices

I think my instance has been growing at about 30 GB a year. I think if you set it up to not rehost the pictures, you can keep the whole thing in the handful of GB range.

So when I ask Let’s Encrypt for a cert, I ask for *.int.teuto.icu instead of specifically jellyfin.int.teuto.icu, that way I can use the same cert for any internally running service. Mostly I use SSL on everything to make browsers complain less. There isn’t much security benefit on a local network. I suppose it makes harder to spoof on an external network, but I don’t think that’s a serious threat for a home net. I used to use home.lan for all of my services, but that has the drawback of redirecting to a search by default on most browsers. I have my tailscale exit node running on my router and it just works with SSL like anything else.

I use a central nginx container to redirect to all my other services using a wildcard let’s encrypt cert for my internal domain from acme.sh and I access it all externally using a tailscale exit node. The only publicly accessible service that I run is my Lemmy instance. That uses a cloudflare tunnel and is isolated in it’s own vlan.

TBH I’m still not really happy having any externally accessible service at all. I know enough about security to know that I don’t know enough to secure against much anything. I’ve been thinking about moving the Lemmy instance to a vps so it can be someone else’s problem if something bad leaks out.

What you are looking for is a RAG and is one of the few legitimately useful implementations of LLMs outside the wall of hype.