Incorrect. Not run as root, but launched by root in a system service (runs as the pipewire user).

Don’t forget the Silverbullet users.

Dyson Sphere Program is a great factory game. Check it out.

I use fail2ban to ban IPs that fall to login and also IPs that perform common scans in the reverse proxy

On the other hand I value Authelia single configuration file which I can version control in git. Authentik is a click-ops burden.

Very accurate 😂

Man, I hate all the boilerplate that Microsoft uses in their documentation, it’s a pain to read anything.