I’d say go Debian and Docker, proxmox is nice if you’re running a lot of VMs or want HA and clustering but otherwise you don’t really need it.

If you want a GUI for docker containers there are several, Komodo or Portainer are good options.

IMO no.

Small instances can have issues with federation and now showing all replies/content.

There’s also the aspect that you’ll need to moderate content stored on your server, if someone posts something illegal and your server caches it, you’re responsible for cleaning it up.

The service will always be on a port, that’s just how networking works.

Do you mean you want to get rid of the path and serve it on the root or a subdomain? So https://searx.mydomain/ instead of https://mydomain/searx/

What do you want to do? Your explanation isn’t very clear on that…

Keepass is very good. Bitwarden just has a server side so it’s easier to set up and use for multiple devices.

No IMO.

Docker is universal, you can easily migrate to any system. If you migrate you’re stuck on TrueNAS.

Also you can use watchtower for auto updates with major version pinning when needed (ie; postgres), or one of the many docker images that notify you when updates are available.

There’s also one called SMS Import / Export that I haven’t tested, but looks pretty simple.

KDE Connect, works pretty well.

For a backups I think QUIK SMS on F-Droid has a backup option.

I just use the built in Komodo update checkbox for each stack. No extra config needed, and for things like postgres that don’t do major version updates very well I pin the major version in the tag.

You can do that too with docker tags for the specific major or minor version you want to use.

I use a GL300 tracker paired with a Hologram SIM. Its a bit involved to set up as you need to run a traccar server somewhere and program the tracker for it, but hologram is like $1 a month and the trackers battery life is several months on a charge.

Actual budget is amazing.

Its not really a keep replacement. Its a good note taking app though.

LetsEncrypt.

You can do that by joining the containers to the same docker network, you don’t need to expose ports even to localhost.

Containers can talk to each other without any ports exposed at all, they just need to be added to the same docker network.

They aren’t on the internet mainly.

My router (opnsense) has a wireguard server which is how I access things when out of the house.

I do have a minecraft server for my friends and I, but that VM is on its own network isolated from everything else.

What do you use TLS inspection for?

There are multiple apps from various devs that all use the Keepass file format, so they are all compatible.

Have fun doing that with a TV remote though, I guess you could buy a very short domain name.