Obviously the only solution is to disable local accounts and force people to upload their sensitive documents to one drive.

I have multiple servers with about two dozen self-hosted services I run. It all started ten years ago, torrenting shows and then automating. And now everything in my life is self-hosted and backed up. But if I showed my current configuration to me 10 years ago, it would look undoable, completely out of reach. So my suggestion to you is to pick one project that you like, build it. Make mistakes. Fix those mistakes. If you want to access it from outside your network, use WireGuard so that nobody else can have access to your system and find your mistakes for you.

Don’t ask for advice. Don’t ask for opinions. That’s like going into a religion conference and asking which is the right God. You’re going to have a bunch of very passionate people telling you a bunch of things you don’t understand when all you want to do is tinker. So fuck all those people, just start tinkering.

Finally, Don’t host any mission critical shit until you have backups that are tested after multiple iterations. I have fucked up so bad that I have had to reformat discs. I have fucked up so bad that data has just gone missing. I have fucked up so bad that discs have overflowed with backups and corrupted the data and the backups themselves. It was all fun as shit. Because none of it was important. Everything important was somewhere else. The only rule is the 3-2-1 rule, otherwise go fuck up and come back when you dead end on an issue.

Pro tip, use ZFS and take snapshots before you make any changes. Then you can roll back your system if you fuck up. I just implemented it this year and it has saved me so many headaches.

Like this?

You could use a different service like one cloud or google and encrypt your data. Or you could get a pi, run it as a mini server, and run any number of docker containers from joplin cloud to nextcloud, or a simple webdav server.

You really droppin shit from 20 years ago, saying it doesnt fit todays standards and using that to cheer the slow death of the free press?

You let companies review your game when you want fans outside your bubble to hear how good your game is. You don’t let companies review your game when you don’t want fans inside your bubble to fund out how bad your game is.

So standard policy?

They’re making their own silicone now. You can achieve a lot more efficiency when you’re streamlined the whole way through.