gobbling871

It's a vpn client on steroids that creates a VPN network (based on your provider) which you can then use to run docker containers inside of, as well as create http & shadowsocks proxies for your VPN network etc.

Comments inside the docker-compose.yml files?

Maybe give cloudflared a try. Works for me even with nextcloud's ssl (don't think there's a way to start NC without the self-signed cert). Couldn't get it to work with NPM (I admittedly don't know much about nginx) so I brought in the big gun(s).

Yes to all questions. Only drawback I can recall is my banking app refusing to pass Safetynet but the website works good enough.

Haha. Said the hoader with tonnes of content he's never going to finish watching.

Backup $home and /etc. That should be good enough.

They provide the best balance for efficiency. Not too powerful enough to be a workhorse and not to weak to run multiple simple applications/services. NUCs are great in that they come with hardware video acceleration tech that's highly optimized for media transcoding.

I used to love Swiftkey before it sold out to Microsoft. I use Gboard with network permissions off nowadays.

This is nice. Shame it won't support systemd.

You don't get any network isolation with this approach vs a service running in its own dedicated virtual network. Just for this reason, I think Wireguard as a VPN access to other local services is insecure.