I ended up with xz.
According to this page it's the one with the best compression ratio. It's also the slowest but since it was one off I didn't mind about it.
Dropped my martini on thinkpad. Dried it out with a cloth the best I could. Nothing happened apart that every time it warmed up it started smelling of Martini
Having multiple interfaces in each vm can lead to issues with routing if you screw something up.
Like you said I'd expose the services via reverse proxy in the public vlan, and enable ssh access on the firewall only from a jumpbox or the ip of your pc (or maybe the vlan you are in).
I've installed it on my (single) AMD GPU (I thought it was for something else) on EndeavourOS (which is, obvs, arch btw :D).
I've been using endeavourOS for about 1y now, after a few years of Mint (and 20years of everything else. Yes, I've used gentoo as well back when it was only install from stage1). It does feel faster (on the same hw) but I've never done any real benchmarking, so it could be just "new shiny feeling faster". I've found an article a few weeks ago comparing boot/compression speeds of different distros. In your particular case I wouldn't be using Debian as I feel you'd need quite up-to-date drivers, and Debian is conservative (and that's a good thing personally, I use it on my servers).
and maybe do a little self-analysis and think WHY that happened. If they all react that way, maybe it's you.
ETA: or maybe you are in the wrong crowd as well!
Proton a few years ago disclosed the IP address of the user of a certain mailbox upon request by LEA. That was enough to get the person found and arrested (I don't remember what the case was about). They HAVE to comply with these requests, but they DON'T need to log/retain those info ETA: and I was wrong, thanks @Cheradenine@sh.itjust.works to set me straight. But I think the point still stands. I don't want to be ALWAYS be tied to a VPN, there are some scenarios where I can't use a VPN.
That was the moment I decided to selfhost my email server.
I've been using matrix for years to this purpose, but moving to xmpp/prosody now