dmoose

I've been using [trillium](https://github.com/zadam/trilium) for a few weeks and have been very impressed with the combination of features and simplicity. It looks like it would check the boxes you list and since it is easily extensible anything it didn't do out of the box you could probably implement pretty easily.

I do the same using kanel. It's just enough to make the typings smooth without dictating anything else about how they are used. I prefer to write the queries directly in sql using pg-promise and then type the results of the query and the parameters of the query using the output of kanel. Any changes to the db result in generating new typings followed by running the tests to make sure nothing broke.

I live in snow country as well so when I updated my boiler for home automation I connected the existing controller that has worked for 20 years to the NC side of each relay. This way if the HA controller fails it falls back to the old less sophisticated but near bullet proof analog control system. I dialed those thermostats down 10 degrees below the HA setpoints. If the HA system fails the relays are inert and the old system keeps the house from freezing.

I suppose if it fails with the relays energized it's going to get pretty hot inside, but in the meantime if I have issues with the HA system I can just turn it off and use the old thermostats. This was great while I was debugging my design.

I was looking at this for a similar use case https://bit.dev/

Would you comment on what router and software you are using, how difficult it is to maintain, and any surprises you have had using it (things you depend on breaking).

I clicked the lost password link on a site handling legal documents the other day and they sent me a plaintext copy of my password via unencrypted email.

There may be issues with a central identity provider, but given the wide range of horrible choices implemented by so many different websites I think the assumption that keeping identity between you and the site owner is a better choice than trusting a central provider is true only in a limited number of cases.

If I hadn't hit the lost password link I never would have known that they keep an unencrypted copy of my password. Finding one trustworthy central provider at least protects you from unknowingly trusting a large number of incompetent providers.