Awwab

In addition, some employees will have no root access, meaning they won’t be able to run administrative commands or do things like install software.

It's more surprising that they haven't been doing this already. No local admin/root has been a security basic for over a decade at this point.

It's amazing they lasted as long as they did considering most people there were selling access to pirated media and the such.

You could have the best of both worlds and then also use GitHub secrets as well. https://github.com/marketplace/actions/deploy-a-portainer-stack

I have used cloudbeats and it works pretty well.

Defcon

One of my first projects would be to setup a small Linux box that I can ssh into remotely.

Why not just take the next step and setup tailscale? That way you can learn and also not have to worry about setting up a full security stack and everything for your DMZ.
Tailscale will let you create a virtual local network so that you don't have to expose anything to the internet.

This is pretty cool, make sure you go to the GitHub for it to grab the docker compose file if you want to self host since most of the documentation seems to default to the hosted version.

I'm not sure if they are still around but you used to be able the get a steam link and a Bluetooth controller and play games in your living room if you wanted to

I just wish there were better ways to find players for your in person game.

Looks like however the data was being collected it started considering some version of windows to be unknown.

You may not have to deal with this but if you find that a cracked install isn't working then consider creating a windows vm where you unpack/install the game and then copy those files back down to your game dir.

I always thought the compose file is great for maintenance. You can always save the docker run commands elsewhere so at the end of the day it's more of an orchestration choice.