If you already have a Unifi router/firewall that'll work fine, you don't need this.
MangoPenguin
All of it is LAN only except Wireguard and some game servers.
For incoming traffic on IPv4 only, NAT technically is fine. But it won't block any outgoing traffic, and IPv6 doesn't use NAT at all.
Have you tried limiting the RAM usage of those containers? They tend to use as much as you give them, which is all of it by default.
Once it’s installed in the terminal, how the hell do I find docker so I can start playing with it?
Type docker
in the terminal, it's a CLI application.
But it sounds like you might want to install Docker Desktop, which does give you a GUI to use.
They are full disk encryption, and it's using the hardware TPM.
Sums up about every thread asking how to do something on Linux, 30 different responses on how the OP is wrong and shouldn't do it that way.
At least on Windows that requires booting the PC from some other media, and that wouldn't work with the drive encrypted because you have no access to the files you need to modify.
Is it similar with Linux, or do you mean you can actually bypass login from the OS that's already booted up??
It's universal unless you need to bake in specific drivers from a machine.
The easiest I've ever used is https://localsend.org/
Very simple, just open it on both computers, select the file and click the other computer.
It's difficult to use with some odd defaults as I remember, and you have to boot into it which is annoying.
Rescuezilla seems like a good open source option, but you do still have to boot into it.
My go-to is the free Veeam Endpoint, as it just installs on the system and does full system images without needing to reboot. I'm not sure if there is a good easy to use open source equivalent to it, so far I have not found one.
It's running on Debian Linux so any disk imaging tool will work it. I recommend this one: https://rescuezilla.com/