fail2ban is mandatory equipment for any ssh server accessible to the public especially on its default port. It’s highly configurable, but the default settings will do fine at making it statistically impossible for any user or password to be brute forced.
OpenXcom is a fantastic reimplementation of the original, and has some even more fantastic mods. I agree if you’ve never played it before and aren’t too familiar with old school “Nintendo-hard” games, it can be extremely challenging even on the lowest difficulty. Fun fact, the original had a broken difficulty selection and reset to the “easiest” difficulty after reloading any save game, so most people never truly experienced a full run at any difficulty above “easiest”, so that’s just naturally perceived as the way the game was meant to be balanced. Don’t be ashamed of playing on the easiest difficulty or using “cheat” mods if that’s what makes it playable for you. There’s nobody to judge you but yourself and what matters is that you’re having fun. And it is a ridiculously fun and replayable game, to me at least.
Back in the old days, a lot of people went through the “Linux From Scratch” process to literally build up the OS from absolute scratch. No distro, no packages, no precompiled kernel, nothing but the raw ingredients. It is a good way to really understand the fundamentals not just of Linux but of the whole computing paradigm our systems are built on. It is not as hard as it probably sounds, but it’s an investment. It takes some time and you need to put your brain in gear to actually learn.
Yeah, that’s all it is. Calibre Portable. In a folder on Nextcloud.
Kobo has a great balance of good hardware, good price, and good openness. It’s not perfect on any of those categories, it just strikes a nice middle ground balance to make it an extremely popular ereader for people who require the kind of openness people like us do. There’s really nothing locked down about them, they don’t do anything in particular to make it easy, but they don’t do anything to make it hard either. “koreader” installs very nicely on Kobo devices, and then you just load your books from Calibre (or right through USB if you’re hardcore for some reason) and you’re basically off to the races.
All the choices for “ebook stores” and ereader ecosystems are proprietary vendor-locked services with no self-hosting options. While Calibre is primarily a “local” tool it is a true alternative to all these proprietary services and I think it’s at least in the spirit of self hosting, if not strictly the letter.
For what it’s worth, I self-host a Calibre Portable library on Nextcloud, which enables me to access all my ebooks anywhere, and to upload new ones to my ereader from anywhere, as long as I have access to my Nextcloud. And I also share the same library through Calibre Web for when I don’t. I retain control of all my books, I remove all the DRM and convert them to epub. Calibre isn’t a hosted service on its own, but it fits nicely into the self-hosting ecosystem, and for that I am grateful.
Nextcloud AIO via docker is super simple and has clear instructions.
Install docker through whatever tools Fedora has to install packages/rpms/whatever. Then follow steps 2, 3 and 4 at least. 5 if you need it.
Discord is a completely proprietary walled-garden that bans third-party clients to maintain full control AND (soon) has Wall-Street-ownership.
Jitsi is open-source built with multiple open protocols BUT has Wall-Street-ownership.
Neither is great, but these are two distinctly different situations.
Nextcloud Notes or Joplin (nevermind all the other features Nextcloud provides) tick most of your boxes. They’re more productivity focused than privacy focused, it doesn’t do “zero knowledge” encryption the way you’re describing, but I don’t really understand the point of that when you’re self-hosting and the server host belongs to you anyway. The federation may leave you wanting more and the collaboration might not be “real time” enough for you either, though. If you can build something better by all means go for it.