Idk about nostr, but yes, the decentralized nature of the fediverse makes this very hard/impossible. Who has the authority on what's your login? What if I don't want a user to login on my instance because they're a known spammer? Etc
I'm on Authentik, they have plenty of guides in their docs for connecting tons of selfhosted tools
Oh annoying! What kind of drives/what's the power thing you mentioned?
I get where you're coming from, but Military documents getting out of Microsoft's(USA) reach is absolutely something positive
Not sure it's a fitting term. Most instances aren't communities. They provide their service, but there's no "we are the members of mastodon.community and here's what we do as a community". They exist but aren't the norm. Calling instances communities probably leads to wrong expectations
This thread has some nice posts on how to live "more solarpunk" by yourself, but IMHO solarpunk is more than that. Finding/founding and participating in all kinds of neighborly/local groups is another big factor which plays a big role in resilience. Community gardens, people's kitchens, cultural groups etc. Community is important. Can also be connecting to your neighbors in other ways.
KYC = know your customer
For everyone else but knowing
You need a reserve proxy. That's a piece of software that takes the requests and puts them toward the correct endpoint.
You need to create port forwards in the router and direct 80 and 443 (or whatever you're using) toward the host of the reverse proxy and that is listening to on those ports. If it recognized the requests are for nas.your.domain, it will forward the requests to the NAS.
Common reverse proxies are nginx or caddy. You can install it on your raspberry, it doesn't need it's own device.
If you don't want that, you can create different port forwards on your router (e.g. 8080 and 8443 to the Raspi) and configure your service on the Raspi corresponding. But it doesn't scale well and you'd need to call everything with the port and the reverse proxy is the usual solution.
Solarpunks can have a little downtime, as a treat
That's cool! I've always had the idea of a small k3s cluster on old phones with postmarketOS. I guess it doesn't work with older phones which don't have the latest Android Version but given the homelab trend generally goes towards small, low power devices, this could continue the trend with super small and low power phones. Probably in 2 years when current gen phones rotate out of company leasing contracts?