t0m5k1

What env vars are you using for the docker and what’s in the config.php?

What’s a nice guide?

Follow this to get it installed and follow the configuration steps to set it up as you need it (I wouldn’t bother forwarding to another server but setup root hints instead and add a timer to keep them upto date):

https://wiki.archlinux.org/title/Unbound#

Then add these configurations to get doh or dot working:

https://wiki.archlinux.org/title/DNS_over_HTTPS_servers#Unbound

If you want a spoon-fed guide, then a search engine may help, but really, it’s quite easy.

If you don’t have a cert you can use let’s encrypt via certbot:

https://wiki.archlinux.org/title/Certbot

I think you might get part of the way but may still find you get detected. Foss DPI projects will not be able to implement the methods used by say fortinet,sonicwall, f5, juniper, Cisco, a10, and others. This is because they all use proprietary DPI created in house. They’re not going to use Foss DPI for obvious reasons, you’ll be able to create workarounds for detection and implement that in a bad payload.

Text can be in a file. All you do is add to the file and sync. Then add different files and sync.

Syncthing

goes without saying.

Bitwarden+vaultwarden, harden the chosen VPS, set SSH to use keys only, then setup fail2ban for webserver and ssh Also consider putting ffsync on it as well for extra browser benefits.

I purchase from the cheapest and use he.net for my nameservers.