You know what, I am gonna call skill issue.
I get that the "press R to join a group" can be overlooked or that not everyone has the intuition to click on the active missions on a planet (alright, these are currently bugged and do not refresh quick enough so always full).
But all one has to do is a quick google search to find out you just open the big holo planet and press R, there are also definitely worse offenders in cryptic/useless UIs.
Removed and apt purge'd python2 package.
Pity debian folded in on itself and dpkg required it at the time for something so that wasn't an easy one.
I wouldn't recommend putting ssh behind any vpn connection unles you have a secondary access to the machine (for example virtual tty/terminal from your provider or local network ssh). At best, ssh should be the only publicly accessible service (unless hosting other services that need to be public accessible).
I usually move the ssh port to some higher number just to get rid of the basic scanners/skiddies.
Also disable password login (only keys) and no root login.
And for extra hardening, explicitly allow ssh for only users that need it (in sshd config).
Usually I would want any playing video to disable screensaver as long as it's playing?
There are/were two reasons why I did that:
The only workarounds that seem to improve stability involve manually downclocking or undervolting Intel’s processors.
Guess that explains why I haven't had any unexpected crashes yet with stuff like Palworld or Helldivers 2 (afaik both are made in UE). Have been running my 13900kf slightly undervolted.
I don't use nginx proxy manager but websocket has to be enabled for apps that use websockets (duh) - you would have to dive into docs or example infra configs to check if the service uses it.
Rule of thumb here would be to enable it for everything. Optionally you could check if the service works with/without it.
E: Websockets are used when a website needs to talk in "real-time" with the servers - live views and graphs will usually use it also notifications, generally if the website does not reload/redraw fully but data seems to change then there is a high chance it uses websockets under the hood (but there are ways to do it without ws, ex. SSE).
Example: Grafana uses websockets but qbittorrent web ui uses other means (SSE) and does not require ws.
borg backup with rsync.net
Borg does de-duplication and compression, I've used it for multiple things like backing up minecraft servers and it can reduce the final backup size by a lot (like 1-2 TBs to a hundred of GB, though that was with content that was highly compressible and didn't change much over-time so the deduplication did a lot too).
There is also borgbase.com which looks a bit better and focuses only on borg repositories instead of also being compatible with just about any usual tools (eg rsync, rclone etc)
I would try momentarily replacing the defined dns servers with nameserver 1.1.1.1 and see if stuff improves, though the pull error would hint that docker did resolve the name but somehow didn't get an answer.
Hard to guess what else could be a problem apart from some obvious stuff - check if the internet connection is healthy and stable (ping, watch for spikes in ms or drops, also any outgoing firewall filters?)
The reality is there isn't an alternative that would be easy enough for non-tech people.
I am never getting my friends off of Discord because there is nothing else that is easy for them and has same features - texting, calling and desktop sharing with sound.
Hows the perf in the VM?
Maybe this https://github.com/Alinto/sogo