Anything beyond setting up a network-wide dns blocker on docker, so... crowdsec, fail2ban, some proxy-related stuff, zero trust tunnelers and so on.
Why? Because its overkill to my current setup and I don't see myself using em for real other than for learning purposes, and thats it.
And before someone asks "Do you protect your server at all?". Other than making some "hacky" stuff with my internet so all ports appear as closed whilst they actually aren't? Eh, not really. Still, my server is about to reach a year of running nonstop 24/7 and it has never been hacked a single time since then, so naaaw.
Mostly because the "reddit mentality" has already established in this community, where the downvote exists solely as a self-validation/"dopamine fix" feature rather than flagging a post as bad and irrelevant.
While the new model has the same octa-core processor as the original, it brings speedier memory, a couple of upgraded ports, and a total of three M.2 connectors
So...nothing "really new" and for a few specific users.
Just install it via pip and then symlink its binary file to /usr/bin.
t. Am running a live stream 24/7 on my orange pi zero 3 (via ffplay/yt-dlp) since forever.
"Why not simply add $HOME/.local/bin to $PATH?"
Because it breaks things. While symlinking it does not.
"Why?"
No idea, honestly.
Also, you can take a step further and make a tmpfs partition @ $HOME/.local and then add the following line to your .bash_profile file:
TMPDIR=$HOME/.local pip install --break-system-packages -I --no-input yt-dlp &&.
I've no idea, honestly. Does it gives me more free time to worry about more important stuff however that will (very likely) not be changed over time by money-hungry developers with false promises of unachievable anonymity and/or privacy in their applications? That I can guarantee a reasonable YES.
This is why I don't care about privacy anymore and use whatever browser works better in my pc/sbc (brave) followed by a network ad-blocker solution (nextdns).
Even a simple "I know how to setup a network-wide ad blocker on docker by using my own image" can get you far, so yep.