I recommend that route as well.

Since you don’t know much, stick to native services. In most cases those are already preconfigured if native service package is available.

You don’t specify.

Do you use containers or not? It sounds like you are trying to start a rootless container.

Otherwise, you are over complicating things.

Add to that need to use machinectl to establish normal user session with DBus in it.

But that only makes sense for rootless containers. User management in rootless container and users in roootful containers can get complicated fast and depends on how image is built.

Any HTTP proxy will do it without VPN complexity.

I don't see how exposing only port 443 makes much difference and port 80 for letsencrypt renewals.

If you are really concerned, buy VPC from large cloud provider, install HTTPS server proxy, configure your web browser to use it. 512MB RAM server will be sufficient as long as it is given enough CPU. Free google instance is suffering from low CPU, not memory.

This way your link between you and internet provider is obscured. Your IP will be shared with others by cloud provider, so you get some obfuscation on that end.

If you use your own certificate authority, then you will get 100% man in the middle protection for link between internet provider and your home. If you use let’s encrypt, then we don’t know that status.

Advantage of this model is speed.

Your browser is still finger-printable, as always.

Securing DNS is its own topic.

You shifted your identity to cloud provider, so it is never 100% safe.

Forget about we keep no logs VPN statements. Judge order and you are logged by VPN provider and don’t know it. So what are you paying for? Slow speed and obfuscation of IP?

Fingerprinting bypasses all your efforts.

What does VPN hide that HTTPS can’t hide for media server?

I am looking at the scenario of listening to my music collection on self-hosted Jellyfin server.

IP address of my phone? That’s irrelevant.

HTTPS is way faster than VPN.

If your facts were correct, this would not look so strange.

Look for roots of conflict deeper than what’s on the surface.

All these downvotes really prove your point.

I think I might switch to that.

I used Firefox for cross-platform password management. That’s the biggest impact on me.

What’s wrong with Chromium? License or Google backing?

Owner is spending all resources into AI neglecting actual search.

There was something else, but I forgot.

I’ve been disappointed by many and don’t trust commercial space.

Dig around and you will find no so pleasant information on DDG and Kagi. I suspect same is true for any business backed search.

I used both and eventually run into negative information, which made me reconsider both. I started with DDG, then Kagi.

It is SearXNG all the way for me now and there are no regrets so far. Other post on it is the best option.

Is dbus still available on non-systemd?

Ukraine openly stated they want nukes and nato membership.

It is an add in disguise for commercial project.

I think there is campaign to get people to use signal, while servers are proprietary and other things are questionable.

It is a great operation for convincing the majority.

It is probably the best solution to the low memory problem, but it is also the least common and may be the most difficult.