You misspelled KeepAss.

I tried to run some software on my router. It kind of works, if it fits. Storage was the limiting factor. There’s an option to expand the FS to include a USB stick, but somehow it made something overheat, and the router froze every now and then.

I’m using EFISTUB instead of a boot loader (on the PC running Arch, anyway) and Windows hasn’t figured out how to break that, yet.

Somehow it hasn’t figured out how to ruin my systemd-boot bootloader on EFI, (NixOS, this time) either. Perhaps it just has better support for EFI than BIOS?

I’m running my email server on a POCO F1 ex-Android phone (running PostmarketOS now).

I wish I could get NixOS running on it, then I’d move other things also there.

Having an unauthenticated relay imposes the responsibility to configure it correctly (the “only certain addresses” part) and protect it (the “accessible outside the local network” bit). Are you sure it’s not accessible? Did you remember to test with IPv6 too? Will it remain protected after the next time you mess around with your firewall for some totally unrelated reason?

If it works - good for you, but be mindful of all the baggage that comes with a new service.

You’re trading one security issue (profileration of app passwords) to another one (an unauthenticated relay). Is it worth it?

up times measured in months and sometimes years

Don’t believe in installing kernel updates, eh? And even userland updates are easier if you’re free to reboot afterwards.