Normal setup for IPv6 is to use public IPs everywhere, and use the firewall to block traffic to your internal systems.

https://desantolo.com/2021/02/ipv6-lan-network-address-translation-nat-on-opnsense/

This article has instructions for configuring NAT6 outbound in OPNSense. It makes the IPv6 work similar to IPv4. Local DHCP routed through single external IPv6 address.

Yeah, easiest way to turn me off a project is pushing black box installers. Don’t trust software that tries hiding what its doing.

Yeah, in 2025 doing encrypted email is a painful process. Every option is a hack on top of a 43 year old protocol.

Here is a howto from Mozilla on pgp with Thunderbird. It isn’t a pleasant process.

https://support.mozilla.org/en-US/kb/openpgp-thunderbird-howto-and-faq

Communication between the email servers is normally encrypted with TLS. The email files themselves are rarely encrypted. Most providers that do encryption of email are using local server managed encryption, so the email providers would still be able to access it.

For proper end to end protection you would want to setup PGP between you and your recipients, and encrypt the email before its sent.

I like dragon slaying.

Cold war from when Ohio invaded Michigan’s land and got the president to back their claim over it. Federal government ended up letting Ohio keep it and giving Michigan the upper peninsula in exchange.