wireguard is self hosted and you do have to “expose” one UDP port. From the outside it’s difficult to detect that this “opening” exists because wireguard just listens and ignores everything unless you send the encrypted credentials. Compared to hosting a webpage or jellyfin directly this is much more secure. As long as you keep wireguard relatively up to date you don’t really have to worry much about it.

I personally use wg-easy. It’s designed to be deployed into docker (using docker compose is by far the easiest).

Then you can either use your IP address, or ideally a dynamic DNS provider so you’d connect to myexample.com:51820. Duckdns is free, otherwise options are available like cloudflare. If you can get jellyfin working, this should be relatively straightforward.

I recently had to increase my proxmox storage as well from an old 256 to 1TB. What I did was make a copy of /etc via PVE Host Backup and saved that on my NAS/external storage. Almost everything is in /etc/pve. Then I created backups of all the VMs and stored those on the same external storage. I then installed proxmox as normal and compared configs between backup and new configs then restored VMs from backup. The reason I did it this way is because 1) I had installed proxmox a while ago and new config > old config for stability after adding some necessary PVE scripts (e.g. intel chip, and 2) I’ve had weird issues before cloning drives and a fresh install was easier than risking some weird edge case troubleshooting. It also let me keep the old SSD as a backup in case something went wrong.

Edit: Also recommend going with zfs mirrored on the new install during the setup: target disks options and zfs mirrored. ZFS offers some benefits vs the default lvm.

Can someone eli5 the differences between containerd and overlay2? Why the switch and what benefits to the user of docker?

Absolutely no problem with it being virtualized as long as you have a pci storage controller and pass that through to trueNAS. HBA cards can be found that do this without raid or anything so you can use zfs in trueNAS.

Fonts do have patents and copywrite laws as “works of art” or in the methods to convert what you see on a computer to your printer or whatnot. For example here’s the history of Calibri:

The Typography Group at Microsoft is responsible for both fonts and the font rendering systems in Windows. Since version 3.1 the primary font system built into Windows has been the TrueType system, licensed from Apple in a deal (with hindsight) remarkably beneficial to Microsoft. Working with Monotype, the Microsoft Typography Group produced fine TrueType versions of Arial, Times New Roman and Courier New, tuned to be extremely legible on the screen; these were all ready for the launch of Windows 3.1. Since then these core fonts have been developed to cover more and more of the world’s languages. In the mid-1990s under Robert Norton a program of truly new type designs was begun, using TrueType technology to render faithfully the bitmaps and outlines designed by Matthew Carter (Verdana, Georgia, Tahoma) and by in-house designer Vincent Connare (Trebuchet, Comic Sans). Until August 2002 these “core fonts” were offered freely over the Web, where they made an undoubtedly positive contribution in terms of legibility and font choice. In 1996 the OpenType initiative with Adobe was announced; this is touted as the end of the font wars’, whereby advanced multilingual text layout becomes available, native rendering of PostScript fonts becomes part of Windows 2000, and unwieldy font formats are rationalized. In 1998 the group announced ClearType. This is a very ingenious method to increase legibility on color LCD screens, individually targeting the 3 subpixels (red, green and blue) that make up each pixel. Such a leap forward in readability on these screens is a crucial element to the success of nascent eBook technology. Simon Daniels at the Group’s website keeps font fans and font developers up to date with most aspects of the digital typography scene, and communicates the technicalities of how fonts work in Windows. Updating us about the current (October 2000) activity of the Group, Simon notes: 1999 saw several members of the group leave to join Microsoft’s eBooks group. These included technical lead Greg Hitchcock, developers Beat Stamm and Paul Linerud as well as former Monotype hinters Michael Duggan and Geraldine Wade. The past twelve months has beeen a rebuilding period for the group, with numerous new hires [sic.] replacing earlier departures. The Group continues to provide font related services for Microsoft, and freely licensed tools and technology to the wider type development community. On August 12, 2002 Microsoft discontinued the free availability of the “core fonts”, noting that “the downloads were being abused” in terms of their end-user license agreements. Most commentators took this to mean the company objected to the fact that the fonts were being installed with Linux distributions.

https://www.myfonts.com/collections/calibri-ms-font-microsoft-corporation

Waiting for the rename to copad AI.