Yeah, i kind of wrote badly. I mean NGINX configuration is simple enough and static enough not to need a dedicated service for my use case. I don't feel the need to mess with NPM. I have a neat folder structure under nginx config so that adding one service is pretty clean and simple and editing one too.
One of the risks associated with wildcard SSL certificates is the increased attack surface they introduce. If one subdomain becomes compromised, it opens the door for potential attackers to gain unauthorized access to all subdomains secured under the wildcard certificate.
(first google link)
I have external usb3 and usb-c raid arrays.... You need to buy expensive enclosures, something that cost 100€+ to be safe, then it will work for a long time.
My older usb3 array (4 disks in a jbod) is almost 7 years old and kicking.
In my experience, you always gain space savings going av1 from 264 and 265 as well. For me its always been significant savings at the same quality level.
Ofc YMMV and use a very recent ffmpeg with the best av1 libraries.
Using let's encrypt certbot is so easy and automated that I never bothered for wildcards anyway, so.