t0m5k1

What env vars are you using for the docker and what’s in the config.php?

What’s a nice guide?

Follow this to get it installed and follow the configuration steps to set it up as you need it (I wouldn’t bother forwarding to another server but setup root hints instead and add a timer to keep them upto date):

https://wiki.archlinux.org/title/Unbound#

Then add these configurations to get doh or dot working:

https://wiki.archlinux.org/title/DNS_over_HTTPS_servers#Unbound

If you want a spoon-fed guide, then a search engine may help, but really, it’s quite easy.

If you don’t have a cert you can use let’s encrypt via certbot:

https://wiki.archlinux.org/title/Certbot

I think you might get part of the way but may still find you get detected. Foss DPI projects will not be able to implement the methods used by say fortinet,sonicwall, f5, juniper, Cisco, a10, and others. This is because they all use proprietary DPI created in house. They’re not going to use Foss DPI for obvious reasons, you’ll be able to create workarounds for detection and implement that in a bad payload.

Text can be in a file. All you do is add to the file and sync. Then add different files and sync.

Syncthing

goes without saying.

Bitwarden+vaultwarden, harden the chosen VPS, set SSH to use keys only, then setup fail2ban for webserver and ssh Also consider putting ffsync on it as well for extra browser benefits.

Not all domain providers will allow you to change the nameservers of a domain they sold to you as they want to sell you the rest of what you need for extra $$$

You can only have 2 name servers on a domain and it is not advisable to make them point to different DNS providers as they will both need to be authoritative and by having 2 different providers will mean you get 2 different SOA which will break fundamental DNS.

to change the nameservers will either be simple or hard, depending on the domain name provider it might take 24 hours for them to change the name servers or they may allow you to change them via web UI which could be just a 2 hour wait.

I purchase from the cheapest and use he.net for my nameservers.