And move SSH to a non-default port. Without that, my public-facing servers get thousands of SSH attacks a day, and it basically goes to zero after moving it to a random-looking high port.

Also, totally agree with using public key login and disable password login.

What’s happening in Palestine and the position people and world governments take on it is a litmus test of good vs evil.

Yep, have been using KeyPass or KeyPassX for at least a decade now and just syncing across all machines (via syncthing). 100% reliable in my experience.

Congratulations on being able to run an completely ethical business - it can’t be easy. I say that non-sarcastically.

I think one of the many issue which has lead to the state we are in now is that it’s often impossible to tell the true quality or value of a product before buying it. So simply buying something more expensive is no guarantee of a better product, because the optimal strategy for an unethical business is to sell the cheapest possible product at the highest possible volume x price.