I have to ask, even though I’m afraid of the answer, exactly how many USB storage devices are you (planning on) hooking up to that poor machine?

No. People who want the benefit of self housing without worrying about hardware will rent a vps or something simpler. The hard part of hardware isn’t the purchase, it’s the maintenance.

Also, why the separate router?

Have you passed their captive portal before turning on the VPN?

Wonder why they wouldn’t use OSM.

It’s alright. I use both their desktop backup service and B2 extensively. Their desktop client and web interface is very basic and a bit rough, you don’t buy their service for the well-developed UI. The service works as advertised though.

Depends on why you want to hide your server ip, what’s your use case? Is it to protect against DDOS?

Cloudflare is evil, but is there any other party you would trust to share everything with?

Don’t worry, it’s fine, there’s nothing inherently wrong with running stateful workload in a container.

You should really back that up with arguments as I don’t think a lot of people would agree with you.

Of course it will, cloudflare is in front of it, they can definitely handje this traffic as long as itsfoss bothers to set correct caching headers for cloudflare to use. That’s the entire point of cloudflare…

Yes, but this way demand on instances scales with user count and aliows smaller instances to exist. Otherwise an errant toot on a small instance that suddenly gets popular will instantly drag that smaller instance down.

You’re not entirely clear on whether you want these services accessible from the internet or just internally. If the latter, change ACME settings to use DNS challenges instead of HTTP. If the former, recheck your dns records, maybe post them here (censored if you wish).

Well, you didn’t specify that requirement in your post.