if I were you, I would do IP whitelisting at the firewall instead of or besides the Minecraft server

yes, they are. reread the post, I just did so and I’m still confident

No, not really.

The problem is that OP is asking for something to automatically make decisions for him. Computers don’t make decisions, they follow instructions.

The computer is not asked to make decisions like “pick the best image”. The computer is asked to optimize, like with lossless compression.

This is something I want to know too!
I don’t believe google deletes anything that has entered their system, my use case is that they don’t have visibility on when are my devices online, how many so I have, and such. But my gmail address has not been my primary one for long, so it’s not that important.

All I have found so far, though, is that what I need is possibly called a Message Delivery Agent.

At least in the case of jellyfin, it’s not exactly just a “resource hogging frontend”.
For instance it keeps track of watch progress, in episode and through the series, and what did you watch last time so you can continue with whichever.
Allows you to remote control your player device (handy if it’s a TV or something like that) from your phone or another anything with a web browser.
It fetches info about the movies and series so it looks nice and for your users it is easier to pick something for themselves.
It has integration for MPV (and probably a few other players) so it does all the above.

And it does all these things in a way that everything is available across all your devices. Not just the content, but watch progress and everything else.

Something tells me you also tell your family that a Linux computer with no desktop environment is all one needs for everyday tasks.

And finally for OP: you don’t have to learn FreeBSD for ZFS, because Linux has it too. Because of licensing issues installation is a bit more complicated in most distros, but if you use Proxmox, they have done that part for you.

I’m pretty sure that on Linux I did not need to disable all functionality to upgrade

Everything gets a different, long random password. It’s not a hassle because my password manager handles everything. It’s bitwarden for whatever I may need to access elsewhere, few admin logins there, keepass everything else.

For someone who’s into privacy I wouldn’t recommend ubiquity at all. A few years ago there was a scandal about them doing telemetry, first in secret without even a setting to turn it off, and when people to to know about it they have made a default-on setting for it. They know you’ll most probably use their gear for the outmost routers too, and you won’t discover it.

Because Firefox isn’t perfect either, to say the least. It has problems, which it had for many years and it’s just counting.

The latter do not buy second hand equipment

You are assuming activists are well funded in some way, and that they are not repressed.

This obviously has a benefit for consumer usage too, same as encryption. You’re basically saying consumers don’t need any kind of antivirus either, because it’s not that critical.
This vuln should have been fixed for consumer hardware too, because it basically permanently taints all hardware that is vulnerable to it. And what makes it so hard to release patches for consumer hardware, when patches were already made for the same generations of enterprise hardware? Basically the majority of the work has been done already

As I said in an other reply, RISC-V is not the solution for the reason that they are perfect today. It is because it is not limited to being used by a few megacorporations that do whatever they want, but it allows competition where companies do what they need to become and remain a good choice.

Because it does not set in stone that there can be only 2 companies producing compatible chips, which can be however bad until both of them does the same shit practices.

So the short answer is by not stifling competition.

But they are already pretending for whatever reason that these are suitable for enterprises, by always includingthe aformentioned remote control components!

Kernel level and admin level is not the same thing. For example on windows, you can’t really write your own kernel driver, and on Linux even root can’t do everything if capabilities have been revoked.

Chip makes should not only treat customer CPUs as possibly-business hardware when adding shit like (Intel) ME, Pluton and (AMD) PSP, but also when patching serious vulnerabilities and providing support!

Risc-V is the real response to this problem

This sounds weird. I was in the impression that operating systems load updated cpu microcode at every boot, because it does not survive a power cycle, and because the one embedded in the BIOS/UEFI firmware is very often outdated. But then how exactly can a virus persist itself for practically forever?

I have stable ~950 MBit/s to the NAS with Cat5e. That’s ~115 MB/s. If that 40 is to a machine on the LAN, either there is some bottle neck at one of the ends, or there’s some problem with the cable to the RJ-45 jacks.

Are you sure it’s not just your instance?

It could be a good idea to move more critical things to a different machine. It’s often said that you shouldn’t run your router and/or firewall on your main server, but I think there are also security reasons for that.

Or to move those to a low power consumption machine with cheaper hardwRe that are either more resource friendly, or very heavy but it’s fine if they can only finish their task over a longer time.

Also, think about how could things go wrong. Have a second DNS and DHCP server (it’s difficult to run a secondary DHCP besides the primary, maybe you don’t need that), and some way you can reach the internet if the router or the firewall gets borked. That “way” does not need to be accessible at all times, but you should be able to switch it on when needed.
Don’t forget to test that these are actually working after you have sweet them up.

Whatever you decide on, don’t forget that you don’t have to do everything at once. Don’t let it overload you. Learning new tech takes time.