Apparently all that data is included in the ActivityPub protocol. On Kbin, every post has an Activity button that shows every user (even those on other instances) that upvoted/downvoted/saved that post. So if a Lemmy post happens to federate to Kbin, all that info can be seen publicly by anyone.

I mostly just want to log connections and IPs to have a record of things.

I just use Firefox Sync. Works on all those platforms.

Yea, I didn’t like that they are going to drop support in the next version or whatever. Not sure if it’s their intended replacement, but Wireguard is installed by default in TrueNAS Bluefin. I recently switched to that, and I find the performance is way better than OpenVPN.

What are you using to monitor wireguard?

You’d set your firewall rules to only accept requests from the cloudflare datacenter IPs for those port forwards. So, the ports would be otherwise blocked to anyone else trying to access them directly.

Yea I’ve got both .zip and .mov blocked on my pihole

The encoded string contains the URL zelensky dot zip. Zip is one of the newer top-level domains. It itself is not a zip file, but I am not going to visit that site to find out whatever treasures it has to offer…