Wow, this is exactly what I was looking for. Thank you.
Original, I thought "hey, everything will work"... but then I started to look into the details. For example, Revolut, it works, then it doesn't work (due to attestation), then works (after people complain).
I really need to ask myself, if this is the kind of experience I want with my daily driver. On the other hand, I know this is just Google strong arming me into their walled garden. Man, I really hate this dystopian future.
Can I install my bank app on it yet? I remember having problems with attestation in the past.
What about full application backups? I've got a few offline apps, I'd like to transfer the data to/from. However, I thought grapheneOS needed the application developer to "approved" this backup/restore method - or you needed root (which invalidated attestation)... I don't recall which it was (but I really miss titanium backup).
There's a great (and overly detailed, but interesting) breakdown of the problems with the hitboxes and other bugs for this level.
I've got a similar set up and everything works. So, I can confirm that your assumptions are sound.
My solution is kubernetes based, so I use cert-Manager to issue/create the Let's Encrypt (using DNS as the verification mechanism), when gets fed into a Traefik Reverse Proxy. Traefik is running on a non-standard port, which I can access from the outside world.
I'd suggest tearing your current system down and verify everything is configured correctly.
For example :
curl - -verbose - - insecure https://... to be helpful)robots.txt) to nginx. This would allow you to see if the problem is between the outside world and nginx or between nginx and your service.... and not to rob you of this experience, but you might want to look into Cloudflare Tunnels. It allows you to run services within your network, but are exposed/accessible directly from Cloudflare. It's entirely secure (actually more so than your proposed system) and you don't need to mess around with SSL.
You will likely want to set up your own instance blocks
As a former Redditor, I gave up on /r/all years before the enshittification (due to the poor signal to noise ratio) and started culling a list of meaningful subreddits. For me this was a game changer.
If you plan on using lemm.ee (or any Lemmy instance) as a pre-curated r/all, I think you're going to have a bad experience. Lemmy, in it's current state, wasn't really made for that (the sorting is too simplistic).
For myself, I simply subscribe to the communities that I'm interested in. If I feel my daily feed is sparse, then I'll look at what's threads are trending in the entire fediverse and add those communities, then repeat. After following this process for a couple of weeks, I seldomly want/need to check the entire fediverse.
I appreciate that Lemm.ee will let me choose the communities that I'm interested in, regardless of they happen to exist on Lemmy.world, hexbear, etc.
I'd definitely add a +1 to lemm.ee
The admin is open and honest, he's got a clear set of goals, which is to make lemmy accessible - nothing more, nothing less.
Lemm.ee doesn't participate in the whole "federate vs non-federate" drama or crippling features (ie: removing downvotes) because it goes against their ethos/mantra.
There are instances that lemm.ee defederates from, but they are usually due to extreme vore, cp, or other content that could expose lemm.ee to some legal problems.
Vampire Survivor: It's fun, easy to pickup, the sessions are short (less than 20 minutes), and lots to unlock.
... Plus, (if you've been living in a cave and didn't know) it's free on Epic Games for the next few hours.
Shit, and here I thought spending my day unblocking people somehow boosted productivity.
There's also the "Unofficial Half Life 2 VR - unleashed" mod, which looks really exciting (I haven't tried it yet).
There's also a trailer for the mod.
edit: wordz edit 2: found a trailer
So, to solve the problem of the left not voting them, they are moving further to the right.
I humbly disagree. This seems to be an overly simplified view.
The origins of "the far left" (as I understood it) was basically promoting heavy government involvement. For example, breaking up monopolies, many government subsidied programs for it's people, which in turn needs higher taxes for it people (so the rich get taxed more, the poor get taxed less).
The origins of "the far right" was the polar opposite. No government involvement. Companies will do "what's right" in order to compete for profit, less tax on it people, as there are fewer government processes/programs (because people have more personal wealth and can afford the programs that are relevant for them).
"the center" was in the middle of these two extremes. The understanding is that there needs to be some government involvement to prevent companies from going unchecked, not all people have equal chances in life resulting in some people needing more/less government assistance, ect. Yet, also acknowledging that the Stalin form of socialism fights against the basic human desire to "work to make their lives better" and companies (when left to their own devices) cannot be absolutely trusted to do "what's right" for society.
The problem with the DNC and the 2024 election is that the media has perverted what "the far left" aka Democrats and "the far right" aka Republicans (and this has been going on for years).
Based on your line of "left vs right", I'd argue that the Republican party is "close to" my definition of "the far right" (fascism aside). Yet, the Democratic Party is actually closer to "the far right" than they are "the far left". I'd even go so far as to say, that the Democratic Party is far "right of center".
So, yeah, I totally support moving the DNC towards the center, because it'll (finally) make the Democratic Party closer to their "far left" ideals.
I agree in principle, but try explaining that to your grandmother.