I’m happy with 90 day certs for homelab stuff: I’m not worried about anyone MITMing my network. I figure the short lived certs are more important for people who provide services with a significant external user-base, or who process sensitive transactions.

I have my certbot set to check every 12 hours and renew at 60 days. Renewing every 3 days would be 20x more load on Let’s Encrypt systems, and that feels like abuse of a free service for my use case.

I really wonder who these retailers are. Like, my grocer typically has 2 human and 12 self checkout open, and it’s no question which of those is going to be faster for someone pushing less than a full cart. They don’t even have the floor space to build twelve more full service checkouts. Reminds me of the bad old days when I’d go to the store and they’d have every human checkout line open, every one of them with 5+ people in line, and it’d take 30 minutes just to check out. If you’re a retailer that only processes a couple dozen patrons an hour, then yeah, I can see where a few self-checks wouldn’t be any benefit.

Feels like we’ve reached the enshittification phase of self-checks: big stores are now so beholden to the technology that the vendors can jack up their prices to where self checks cost the store more than a full-service checkout, but they can’t go back because there’s no staff and no space.

Tandoor definitely has a self-hosted path, including SSO integrations. It has a fair API that I’ve used to link it to nutrition data at USDA and my grocery store for prices. I suspect I could use the API to transfer a shopping list to the grocery store’s ordering system, but I don’t like the pickup or delivery systems. I’ve been pretty happy with tandoor’s import-from-web results, although the ingredient amounts often need some editing.