Your stance rules out all the big and mature software. No judgement on the stance, but you are asking a difficult question.

Off that alternatives list, the only one I’ve heard of is lighttpd, and it’s news to me that lighty can do reverse proxying. But I would try that.

I expect it to be a lot more difficult to find documentation and support for anything more obscure than lighty. Which may be fine for you, just know what you’re getting in to.

As for certbot, iirc you need to add a renew command to cron, but otherwise certbot will take care of it. I’m sure the cron is in the documentation.

Note that sudo echo does not work as non root because the shell redirection is attempted before the command runs. You want echo foo | sudo tee -a /bar instead

TFA makes no mention of this, do you have a source for the data loss caused by clause’s contribution to the Linux kernel?

Those temps are very normal. You can set cpu or frequency limits if you want to use less.

Probably yeah https://security-tracker.debian.org/tracker/CVE-2026-42945

Ughhh I have a physical system that I can’t just swap to Debian. But I have swapped my vms

• fix the documentation bug I reported 3 years ago, before it became a problem for stable Linux distributions. Instead of leaving up documentation that literally prevents the client from working and is an even bigger problem for stable distributions now. Yes it’s my pet tiny bug, but how much effort can it really be to rewrite one section with configuration that DOESN’T break the product. I even wrote a suggestion for them.

https://github.com/CaramelFur/Picsur but it’s no longer being maintained

You can also delete a rule with ufw delete allow xxxx/tcp.

One benefit is it’s the future and my DE is going to drop X soon.

Another is it’s more secure. Not just any window can read the clipboard or the keys you press. Of course, I had to turn that protection off because Steam is still X and my controllers back paddles popped up a permission dialog whenever I hit them.

Am I doing a good job convincing you? Anyway, I switched to Plasma Wayland and it was fine for me, with a few tweaks needed.

No custom login theme now, or no theming ever? I will likely want to change a few things

Wdym by that?

And have you read the Arch news entry about this?

What’s wrong with nvidia-580xx-dkms?

You might want to be more specific, cloud flare has a lot of different products, and you’re getting answers with differing assumptions.

For the self hosted focus, I use tail scale already, and when (not if) that company gets shitty, I will switch to head scale, or a competitor, or straight wire guard (plus firewall etc).

But I also run web sites on cf, and there’s no real alternative, definitely not for free. I don’t have hundreds of millions to spend on the CDN part, for starters.