Roles in authentik are for permissions in authentik. You want a group instead. Group memberships are send via OIDC.

I would put truenas on the NAS, also put a VM on truenas with 16-24G of RAM.

Create a kubernetes or docker swarm cluster with server 1 and the nas vm and just have everything as containers. This way you just have one resource pool, and the containers will be started wherever there are enough resources available. The containers will mount NFS shares from truenas which truenas will create automatically as ZFS datasets. ZFS supports snapshots.

This is probably the way, because a traditional “mail server” is actually 4-5 different servers working together.

• postfix for SMTP
• dovecot for IMAP
• amavis to plug in…
• spamassassin as anti spam
• clam-av as antivirus

And they can all be very easily misconfigured to break everything completely. Great learning experience though.

But not paying for it almost guarantees it.

Ultrasonic cleaner with isopropanol solution.

So for those unaware. If followed through this would be the biggest economic crisis worldwide, since the great depression. No hyperbole.

US treasury bonds are the way the US government borrows money. They are most of the debt. They are also the “safe asset”. Because it was assumed that the US, being the sole superpower and the biggest economy, would always pay back its debts. Because of this whenever organizations needed to park money super safely, they would use US government bonds.

Around 30 trillion worldwide, that is 1/3 of the world’s GDP, is held in US bonds.

You know who the biggest borrowers of US debt are? Pension funds. And you know the biggest one of all of them? Social Security. US social security holds around 3 trillion of US debt. Debt that would suddenly be worth nothing anymore.

In total, around 27 trillion of treasury bonds are held in the US by pension funds, local governments, etc. These would be gone.

Other countries would suddenly lose 3 trillion, biggest of which are Japan, China and the UK. Belgium Luxembourg and Switzerland hold a huge share compared to their economy, and could collapse completely.

But hey, at least the national debt is gone, right?

Well… No one would borrow the US money anymore. Who would trust them anymore? Likely, this would be the end of the USD as the worlds reserve currency. With that, I doubt military spending could be upheld. The US would collapse as a superpower.

And then install graphene OS

Nextcloud has collabora integrated.

I would put this stuff behind VPN.

Seems weird to me, the router would need to do deep packet inspection of DNS and selectively block specific ones. It feels more like you’ve set up your DNS to do forwarding instead of resolution. Can you post a network diagram and the DNS config?

Do tcpdump host $server instead. Otherwise you will only see the request (the response goes to a different port).

Just to be sure you do dig A @server $domain (with the “A”) and can confirm the following

SERVER is your server

;; ANSWER SECTION is empty (or doesn’t exist)

;; AUTHORITY SECTION mentions your local DNS server

Also check

dig NS @server $domain

Is your server in the answer section?

Here is how I would diagnose (I’m assuming you have Linux / WSL on a client)

1. Check the DNS record is actually set (yes do it again)
2. Do these steps on the client:
3. dig $domain check which server answered
4. dig a $domain should give a record
5. dig a $domain @server to make sure you’re querying the right server

If none work, probably network issue (DNS boind to wrong IP, firewall, etc)

If 3 and 5 work but 4 doesn’t, your DNS isn’t authorative.

If only 5 works DNS settings on the client is wrong.