This! Podman rootless quadlets is so powerful and beautifully simple. Just look at that faaar superior security model and hos it doesnt even need a service to manage services because it just integrates natively with systemd I replaced my entire container layer from Rocker Swarm way back with K8s. Then it dawned on me I dont want the pods to move to another node by themselves anyway and then I just moved to Podman quadlets managed Ansible. Oh, and the podman pods are awesome as well.

I use kanidm because the footprint is lower than the alternatives you mention, and it’s written in Rust.

What a weird comment. That’s like saying using the window wipers is using the car wrong. Sure you can go without but when your shit crashes because you thought you were cool not using them you learn they serve an important purpose even though it may not be what seems to be the primary goal.

We’re more than 125 000 employees globally using M$ Office 365. It’s cheaper, more secure, far superior for collaboration than the locally installed apps IMO. Works on and Linux distro with a JavaScript capable browser. Google suite is even better but the people calling the shots have a fetish for M$. Saying the web versions are not professional is odd. Maybe we just don’t share the definition of professional

Vautlwarden as a service is great and since it’s GPLv3 licensed there’s no way that can be shut down. But the client is another matter and maybe that doesn’t stay open for using it with Vaultwarden forever https://www.osnews.com/story/145029/get-your-passwords-out-of-bitwarden-while-you-still-can/

Joker.com are cheap and they work. Not the most sexy UI but it works just fine. Personally I have about 25 domains with them. I use (and can recommend) Bunny.net for DNS and CDN and Hetzner for compute and storage.

Fuck Cloudflare. Hail Bunny CDN and Netbird.io for private networking instead of Tailscale/Headscale/Pangolin .

You can bake haproxy and acme.sh into a container yourself. Haproxy is hands down the best performing/least resource consuming RP. Dynamic management, like mimicing Traefiks service discovery, can be a bit tricky though. Yes, it doesn’t support ACME itself but once you get passed the “hello world” RP’ing and need something more advanced, like ACME DNS01, Haproxy with acme.sh is your buddy for life.

Our household has a subscription on Nebula we’re quite happy with. Some good independent content.

Of all the rich and influential people in US Taylor Swift is the least of your problems. She’s an absolute winner for opposing the power grabbing ppl. Take it out on Jeff Bozos or Elon or some other undemocratic capitalist.

As a former sound engineer this made me lol 😂 Poor Taylor, she would have broken a nail or ten