It can be a pain to manage but it works well once it is setup

Just make sure it isn’t your only line of defense

It is also quite a bit dated

You just use a VPN

Yes but I personally wouldn’t run OpenWRT on x86. I would instead pickup a old gateway/firewall device that is supported by openwrt.

I would drop into the Docker VM and use scp to transfer all if your data

The issues with Rustdesk are pretty well known at this point.

https://www.reddit.com/r/selfhosted/comments/14kjvkg/community_consensus_on_rustdesk_with_all_the/

https://www.reddit.com/r/selfhosted/comments/1smy771/stay_away_from_rustdesk_if_you_want_to_selfhost_it/

Bigbluebutton

I’d say avoid Rustdesk due to its shady Chinese origins

Honesty, I respect Codeberg for making a decision. No matter what they choose there would be pushback

Signal and therefore Molly dropped support for SMS

SMS is really insecure so it makes sense

I like Molly a lot better personally

Signal or Molly are probably going to be your best bets

The limitation of smaller platforms like Pixelfed is that basically no one uses them. If you are using Instagram to keep track of people in your local community you are unlikely to find anything else.

That is for containers not VMs

I’m thinking about doing BGP+Wireguard

You are getting confused by NAT

In IPv6 there is no NAT. NAT makes things more complicated and adds overhead that isn’t needed. In the old (pre Nat) internet IPs worked like it was suppose to and each device had its own routable address. IPv6 fixes this by both using a massive address space and allowing hosts to get infinite IPs. You can assign a IP address to each service since there is so much space.

In general NAT is the enemy of peer to peer networks which is what IP as a protocol is designed to do

I would look into learning about the OSI model

For context, Caddy is a reverse proxy which is specific to the layer 7 protocol http. Layer 7 protocols are generally not compatible with one another since under the hood SSH, HTTP are all very different despite them all running on top of TCP.

Do you not have internet access?

I personallly would just use a DNS challenge to get certificates

You just need a reverse proxy