Are you sure you went with RAID1 with 4x disks instead of RAID10?

Good spot - this is wrong. It should've been 4 x 3.84 TB NVMe SSD RAID 5. My colleague set this bit up so I'm not entirely up to speed on the terminology.

I’d say their new 2FA setup is still weird. Not properly documented, and enabling broke all my devices. ActiveSync for example is not working (even with app/device specific passwords)

Do you only need authentication? Give Tailscale SSH a look.

Self-hosting is a must. I havn't found whether Headscale has the equivalent feature.

I think it does:

https://sourcegraph.com/search?q=context:global+repo:github....

https://github.com/juanfont/headscale/pull/847

I’m not sure how well does it support it though, and I can’t open the docs for some reason right now.

Unfortunately, this has always been a problem there..

If you're interested how they run Wikipedia, their tech docs are public: https://wikitech.wikimedia.org/wiki/Main_Page

https://github.com/wikimedia

Compared to many other stuff I read, it's mostly "boring tech".

I've never used them but asked them once about pricing. For my use case they were really expensive ($1,500/vCPU)

I am been using vector.dev for a long time now. It is also easy to setup. And it looks similar to your idea.

make more mistakes, so you can learn from them.

yeaaah let us arrest the good guys...

Just because you did one good thing doesn't make you a good guy if you've done bad things too.

The indictment shows he broke six US cyber laws in 2014 in connection to the Kronos malware, which he created.

In the eyes of the court, there is no good or bad, only law if followed based on evidence.

In fact the court is concerned with justice, which absolutely depends on good and bad as opposed to the strictures of the law.

In the magical fairyland, yes.

seems to be a bad idea to get domains from strange small countries just because they look cool.