The answer is get a minimum linux image, add nginx or apache, and put your content on the relevant place. (Basically, your third option.)
Do not bother about the future of nginx. Changing the web server on that image is the easiest thing in the world.
I stopped using it because it has an extremely complex protocol, with very large bloat that increases with the number of files, and incredibly sensitive to latency.
When I stopped syncing directories because they would take days to upload and started compressing them so they would finish in 10 minutes, I decided it had to go. (Oh, and it’s extremely sensitive to network problems too.)
There are several ways to evade NAT. Your router may or may not block those, on a case by case decision. You must know really well how it will behave to have any confidence that you are secure.
Or, in other words, NAT isn’t a security feature because it’s not built to provide security. It may be intentionally broken so your home network works better, and it may have obvious security flaws that nobody looked after. For network security, you should use something intended to give you network security.
You would have to move them into some folder you are not syncing.
Well, it works in a different way than NextCloud. You don’t have a server, instead you just make a share between your computers and they are all peers.
It takes some getting used to the idea, but it’s actually much simpler than NextCloud.
Yep, I’ve adapted all of my setup to syncthing, and never looked back.
I suggest you reverse that order. If first you learn how to host your own matrix server, you’ll have a better idea of what part of “how networks work” you wan to learn.
Or maybe you decide you want a full graduation course on how network works so you can learn all of the basics. But either way, that first half is a large endeavor.
It’s encrypted at rest with a passphrase. Syncthing encrypts it at transit with a random key.
There is a huge difference on the security of those.
Keepass + syncthing.
Don’t let your vault go unencrypted through the cloud.
He wants one he an run without adding an exception on NoScript.
Personally, I don’t know of any.
Don’t rush it. You will have plenty of opportunities to change into Debian when your Ubuntu stops working.
Keycloak claims to handle authorization, but the part that it handles goes only up to enumerating what accesses you have.
Checking those accesses and allowing or restricting the usage is up to your system.
The majority of bots out there are stopped by just using a hard to guess password. It’s not them that you should be worried about.
What powers an admin have to break your stuff when you only have a single other account?
Some times separating concerns is meaningless. Some times it’s useful to have many accounts for a single user. Some other times the admin/normal user separation is useful. It does really vary.
Oh, I was just trying to make a joke. It’s not a serious commentary.
Nah, with just 8% of CPU load, you can’t possibly have a CPU bottleneck…
Try to run something that requires php7 and something else that requires php8 on the same web server; or python 2 and python 3.
You actually can, but it’s not pretty.
(The thing about a declarative setup isn’t much of a difference, you can do it for any popular Linux distro.)