Nope

Well everyone here is telling you what the problem is. If you’re trying to go by every step in that blog post you linked, that’s wrong for what you’re trying to do. That’s a reverse proxy for HTTP requests.

Nooooo…that’s not what I’m saying.

I’m seriously not trying to be rude here, but I went and read the rest of the thread just now. Your understanding of processes, networks and VPNs is wildly misinformed. I think you need to spend some time learning about each before you go and dismiss what everyone is telling you here, which is that you’re trying to make an overcomplicated and very inefficient VPN right now.

Running a torrent client through a proxy doesn’t isolated a process. Especially not when you’re pushing the traffic through a local proxy. You also don’t need to forward any ports.

Connect to the VPN, make sure your traffic is routing there properly, and you’re done. OR, you really want a proxy, you setup a proxy. You don’t need both, and neither gains you any security. If you’re concerned about process isolation, that’s a whole other thing you should read up on.

I think you’re missing the point of what a proxy is. You don’t need a proxy in this scenario if you’re connected with Wireguard…

No, just means they need to set the correct move.

Well, routers CAN be switches. OP is just not using them in the right way.

That’s not how DHCP relays work.

Having an HTTPS enabled server behind a proxy means the server is connecting with the proxy endpoint. That’s not how HTTPS works. If you want HTTPS enabled for a server BEHIND a proxy, you would do it at the original hand off (forward proxy), in this case meaning the Cloudflare proxy that clients connect to.

You’re seeing the errors because the proxy backend is being told to speak HTTPS with Caddy, and it doesn’t work like that.

R2 has no ingress or egress fees

You altered, bruh? Read the response. No idea what you’re talking about.

Wut

See your own answer for why that isn’t needed.

I personally don’t find that many people are approaching me saying something like “Hey, you should be into this thing because it’s to your benefit”. That’s what insane US Christians do.

If someone mentioned a concern they were having with publicly available services, and I happened to have a self-hosted version of an alternative ready to discuss, sure.

By no means would I ever be out there trying to tell people “THIS IS BETTER. DONT YOU GET IT???”, which is where you sound like you’re coming from. It’s also not a “hobby” and it takes a lot of skill and effort to not take an INSANE amount of time for people who aren’t familiar. If you want to be tech support for a bunch of people, sure, go for it.

Totally unnecessary though.

Why would this person want KVM? They don’t need anything a full VM provides, they’re just trying to run many services easily on a single host.

You’re overthinking this. You don’t need an actual VM for services. Containers are fine. If you’re worried about security, go down the Katanor gvisor rabbithole, but you definitely don’t need an entire OS and VM running for simple services.

There’s no reason containers can’t be hardware accelerated. I’m confused by what that statement means.

Uhhhh, why?

Why would you try? Are you saying proselytizing is something people should be into? I would hard disagree. It’s not for everyone, and it’s more specific to a subset of people who have time to bother.

Those were just made up brands, but you can see what I mean if you look through Amazon, eBay, Alibab…etc.

From your own tool you can see these brands stand out:

Some extra context: https://news.risky.biz/risky-biz-news-acemagic-mini-pcs-shipped-with-pre-installed-malware

‘AceMagic’ AKA ‘AceMagician’ AKA ‘AcePuter’ AKA ‘AceMini’ depending on your market.

Well, if you have your preference, go with it. The base thing is to stick with a company with a solid reputation that was a warranty and isn’t disappearing overnight.

Then just go with the warranty. Good brands are obviously well known: Cooler Master, Corsair, TerraMaster, Orico, ASUS…etc.