Roles in authentik are for permissions in authentik. You want a group instead. Group memberships are send via OIDC.

I just want to point out that billionaires do not have billions on their bank accounts, they own companies worth that much. The issue is the concentration of power they have through that.

I’m not sure if you’ve ever had a public project, but for most people, be it YouTube, twitch, github, whatever, its not so easy. Negative comments grate on you, and, over time, can really take a toll.

William Osman interviewed a bunch or creators about this: https://youtu.be/DVCpKfedfok

Its not as easy as to call people out. Some people go great lengths out of spite, doxx you, send you death threats… Is it really worth it? Not that a “fuck off” will work anyway.

You say people will join you but they really don’t. The reality is there are a ton of crucial open source projects being run by one person on the edge of burnout. See curl, xy, etc.

Money absolutely would help and I wish the EU would put additional funding into this.

I would put truenas on the NAS, also put a VM on truenas with 16-24G of RAM.

Create a kubernetes or docker swarm cluster with server 1 and the nas vm and just have everything as containers. This way you just have one resource pool, and the containers will be started wherever there are enough resources available. The containers will mount NFS shares from truenas which truenas will create automatically as ZFS datasets. ZFS supports snapshots.

The Finns could probably take Russia on their own. They have been continuously preparing since the winter war. Everything is build around it, everyone has trained for it, they even test moving their entire economy to war economy on a regular basis.

Maybe you should read that article you linked completely. EU battle groups are multinational rapid response forces, and merely a subset of troops the EU can muster. Germany alone has 180k active service personnel.

This is probably the way, because a traditional “mail server” is actually 4-5 different servers working together.

• postfix for SMTP
• dovecot for IMAP
• amavis to plug in…
• spamassassin as anti spam
• clam-av as antivirus

And they can all be very easily misconfigured to break everything completely. Great learning experience though.

AES is already post quantum crypto so that sounds a bit marketingy.

Check out GrapheneOS

So for those unaware. If followed through this would be the biggest economic crisis worldwide, since the great depression. No hyperbole.

US treasury bonds are the way the US government borrows money. They are most of the debt. They are also the “safe asset”. Because it was assumed that the US, being the sole superpower and the biggest economy, would always pay back its debts. Because of this whenever organizations needed to park money super safely, they would use US government bonds.

Around 30 trillion worldwide, that is 1/3 of the world’s GDP, is held in US bonds.

You know who the biggest borrowers of US debt are? Pension funds. And you know the biggest one of all of them? Social Security. US social security holds around 3 trillion of US debt. Debt that would suddenly be worth nothing anymore.

In total, around 27 trillion of treasury bonds are held in the US by pension funds, local governments, etc. These would be gone.

Other countries would suddenly lose 3 trillion, biggest of which are Japan, China and the UK. Belgium Luxembourg and Switzerland hold a huge share compared to their economy, and could collapse completely.

But hey, at least the national debt is gone, right?

Well… No one would borrow the US money anymore. Who would trust them anymore? Likely, this would be the end of the USD as the worlds reserve currency. With that, I doubt military spending could be upheld. The US would collapse as a superpower.

That’s a lot of work, I appreciate it.

Reminds me a bit of how it was in Germany at the beginning of the Iraq war (2). Plenty of Americans saying we should be bombed back to the stone age for not going to Iraq, while our soldiers were dying in Afghanistan. I remember in all the bulletin boards people would kind of cheer for American losses, hoping secretly or sometimes openly that Iraq would win, and the schoolyard bully would get another bloody nose.

That’s the moment large parts of my generation became anti-american.

Americans like to think of themselves as heroes, fighting for what’s right, upholding the constitution etc. But if you look at history Americans again and again chose to simply do nothing. You reached late Roman decadence.

Here a candidate voted with the far right and a week later, one million people were on the streets. Population adjusted that would be 5 million Americans. That was a small protest for us. And that’s nothing compared to the French. I looked at the biggest American demonstrations and this one demo, a regular Sunday for us, would have been the third biggest in the US, population adjusted, or the seventh biggest, not adjusted.

All these talks of civil war… You cannot even move your ass to go to a demo. You think regular Americans are actually going to look at a Bradley, who can kill all the inhabitants of a house with one shot, and go like “yep, time to strap on the suicide vest!”

Even those militia types… Look at them. How far do you think they can run on average? How far with a backpack? They are just LARPing. 80% will stay home, 4% will go back home after the beer runs out, 15% will rat the others out to the Gestapo.

I would get a backup tool that offers encryption, which is most of them. Popular choices are: tarsnap, restic and Borg.

Nextcloud has collabora integrated.

I would put this stuff behind VPN.

Get a refurbished Lenovo thinkpad t470 or so from ebay, make sure it has full HD and comes from a commercial shop. All the Thinkpads work great with Ubuntu. They are good quality business notebooks, easy to repair with good parts availability. You can probably get one around 150 or so.

I repaired laptops for a living for a while and Thinkpads were always my favorite.

Seems weird to me, the router would need to do deep packet inspection of DNS and selectively block specific ones. It feels more like you’ve set up your DNS to do forwarding instead of resolution. Can you post a network diagram and the DNS config?

Do tcpdump host $server instead. Otherwise you will only see the request (the response goes to a different port).

Just to be sure you do dig A @server $domain (with the “A”) and can confirm the following

SERVER is your server

;; ANSWER SECTION is empty (or doesn’t exist)

;; AUTHORITY SECTION mentions your local DNS server

Also check

dig NS @server $domain

Is your server in the answer section?