And cloudflare tunnel which allows you to block even ports 80 and 443. The only attack vector is then through ssh but with passwords disabled I wouldn't worry too much about that.
Nah, that’s FUD. I had a pretty easy time setting it up myself. You only have to setup SPF, DKIM and DMARC. Which is pretty easy by itself. You even have online services to check that you have set it up everything correctly.
That’s just where you’re getting started. The biggest hurdle is you have no reputation (or worse, you’re on a shared provider giving you negative reputation to start), and you have no good way to build that up as an individual person, and no good way to debug/appeal each case as your emails get rejected as possible spam.
I’m on hetzner. My IP address was in some dnsrbl lists. I appealed and got my ip clean. Now I can send emails to gmail and outlook and they arrive successfully. I don’t see where all this fuss comes. You set up your server according to google and you are good to go. That’s all.
IPFS is famously slow/unreliable, not widely used, and you still need to pay for hosting of anything you don’t want to lose because storage, bandwidth, and operator time aren’t free and someone needs to get paid to deal with abuse.
Depends on who you are — Gitmo comes to mind – but at least in the United States you can substitute being beaten by agents of the government with being imprisoned where the other prisoners and possibly agents of the government will beat you until you give up the password.
apt install unattended-upgrades. And Hetzner's firewall.