sorry that was a blunder on my part, I wanted to say “Debian and Fedora” but autocorrect gotten a hold on me it seems

People who deeply care about this typically use a distro which has a strong stance on FLOSS software like Debian or Fedora
Arch Linux is more free on this as long as the user gets a more conveniant way to install everything (even proprietary software)

the Arch Linux way however is also reading every PKGBUILD (where the license is stated) before installing and if you need to have an easier way to search through licenses just programatically solve this yourself i.e. by using https://github.com/archlinux/aur and going through all branches with a script

My Arch Linux Homeserver and VPS which ran since years are like: “huh?”

Not a single Ubuntu upgrade failure on my book anymore 🤞

.zip is already a thing
https://www.malwarebytes.com/blog/news/2023/05/zip-domains/amp

I’m using Caddy (sometimes in a container or most of the time as system package) as reverse proxy mostly for containers
I try to minimize non-container services but they work well with Caddy too

Traefik is a tad more complex (still nowhere near Apache2 levels though) but scales more easily espcially if you only run containers and start/stop them programatically

if you are open to learn something new: Caddy webserver has a dead simple config, fetches tls certs by default for you and works with crowdsec too

even consumer SSDs have around 1500 TBW (Terrabytes written) per TB until warrenty excludes any failure
which means you could write for example every day for 10 years 400 GB on a 1 TB SSD
this is already a very low estimate, most SSDs do better

anyway OP mentioned enterprise SSDs which can write 1.0x or 2.0x it’s own size every day for 10 years

for someones who values security above everything else thats totally fine
but for someone who wants to reduce e-waste by prolonging the life of a phone with at least some updates this might be not the best solution

CalyxOS supports Pixel devices far longer than GrapheneOS does (they drop them once Google drops support too)

the amount of plugins are also amazing
convert non-lossy files automatically to aacmp3|ogg? fetch lyrics? push updates to mpd/sonos/jellyfin?

It’s 2023, we are almost already at Passkeys and you skipped TOTP (basically that “Google Authenticator” does) as 2FA?
anyway there are a lot of open source TOTP apps available to choose from like Aegis or if you want to sync it something like Bitwarden (Premium or Vaultwarden)
desktop apps also exist but that would defeat the point probably

stay away from proprietary apps and do backups of these TOTP secrets or you’ll absolute will lock you out if you loose your phone somehow

Voyager recently got added to F-Droid but can also be used as PWA from a web browser but personally I’m currently waiting until Infinity for Lemmy actually will get it’s first stable release

on linux it is probably easier to setup podman nowadays with Podman Desktop and being easily available in most repositories while Docker never released their Desktop app on Linux

on anything else Docker is the least path of resistence currently but who knows if they fuck up again in the future

yea also custom domain with catch-all + custom rules on mailbox.org is hilariously powerful and allow you to use an own email address + its own folder for every website without actually creating any alias beforehand

I also have a hard time understanding how 2,5€ a month is to expensive for someone who most likely owns Apple devices since iCloud is really awful to use without at least one Apple device

If you expose ports on IPv4 or IPv6 (port forwarding) anyone can access the service behind these ports if they know your address but so do you too

yes just like with a static IPv4

This year I started using DynDNS with only my IPv6 address since IPv4 is behind CGNAT and it actually works quite well nowadays

something to keep in mind is that both WSL2 and Linux container on Docker Windows use virtual machines
these come with a drawback of additional overhead or cheaper hosted VPS don’t allow to nest virtual machines inside their cheap ones