That’s the plan, but it’s still far away

For cli I just use podman(/docker) containers. Good enough and I don’t have to learn a new tool

The path is part of the http protocol. Most firewalls only parse the first couple layers (ethernet->ip->tcp/udp), not http as well, unless they do deep package inspection. Idk if openwrt/banip has functionality like that.

It might be easier (and more performant if the firewall has weak hardware) to just allow tcp port 80 and let your reverse proxy do the filtering for that, since it (usually) needs to parse the http anyways.

The Fediverse isn’t federated.

All those clients are ActivityPub, not say some Twitter, some Facebook, some Bluesky, etc.

How is that different?

A DDoS that brings down the biggest(?) DDoS protection provider?

There is a fork of Firefox Send

https://github.com/timvisee/send

If you already selfhost Bitwarden/Vaultwarden, you can use Bitwarden Send too.

They make breaking changes like that in patch releases?? Do they not follow semver?

Btrfs has it’s own build-in raid. From what I understand you should mount the filesystem with -o degraded and then use btrfs replace to switch to the new drive. I’ve never had to do that myself yet though.