I think webassembly will come out on top as preferred runtime because of this, and the sandboxing.

There’s a forked ufw specifically to solve docker’s issues.

But yes, docker + ufw is something to be carefull about.

UFW is an interface to a subset of iptables.

There’s things iptables can do that UFW can’t. Nothing that UFW does, is impossible to do with iptables.

By why might one use UFW I hear you wonder? Convenience.

If you already master the art of iptables, no reason to learn UFW instead.

The ampersand means the parent program doesn’t have to wait for autostart.sh to finish. It is not part of the filename.

Idem, I default to debian on server and Xubuntu on laptop.

https://foldingathome.org/

I think nostr is the better decentralised social media technology, but I fear you might feel left out by the people that frequent it (as they would here).

As a start, you can use opensnitch to see what connections it makes.

I have a shared syncthing folder on all my devices

Syncthing is not limited to local network. It’s hole punching is one of the major features