Never mind

Ubuntu 18 is long EOL

XML is really inefficient and sometimes vulnerable to denial of service attacks due to it being hard to parse.

The difference is that Cloudflare has access to everything and exposes your stuff directly on the internet. A VPN would be far more secure with the tradeoff of inconvenience.

You do have open ports as it goes though Cloudflare. If Authelia ever has a CAVE you could be pwded. Cloudflare is nice but it gives a false sense of security and routes everything unencrypted though a large tech company.

Robots.txt is completely ignored these days

Have you looked at all into Meshtastic? Depending on where you are, it may work quite well for local communications

I have literally never heard anyone mention xmpp outside of Lemmy. Anyways it is a dead technology due to how fragmented it is along with its reliance on XML

Simplex chat looks interesting although I don’t use it

I would recommend that you use what the people around you use

Mayrix is awfully rough around the edges

Zswap is way slower

How many Firefox tabs do you have open? Close Firefox and then look at ram usage

Brother tends to be a lot better than other companies in this regard. I’ve owned the same printer for years and never had an issue.

I wouldn’t recommend isolating it as it will make it a pain to print.

You don’t need their proprietary app. Brother printers support driverless printing so it will work on all major platforms

So your solution is to use a less secure setup? I don’t really get your logic. It is trivial to migrate acme providers and all your devices are already dependent on the global certificate authorities including Let’s encrypt

https://gen.xyz/pricing

Their cheapest domains are $1/year. I’m not sure I understand why you wouldn’t just get a domain.

No, you would only use this internally. Overall doing this is a bad idea (if the root gets stolen encryption is useless) but is technically possible if you are looking for a learning exercise. It would be about the same amount of work as Let’s encrypt since you would probably still want to run ACME with fairly short certificate lifetimes.

You could just use Let’s encrypt

Self signed isn’t quite the same as a internal CA

All you need is a DNS name. You can buy one for a few dollars.

Even if you refuse to buy a domain you could always run your own certificate chain