I went exactly the same route. Years of proxmox realizing it is not KISS in any way for my use cases. Switches to Nixos on ZFS root (so no bash installation scripts ;) ).
However, docker has not the same level of isolation and security as VMs. I am currently looking into gVisor for that.
Ansible and Terraform united. Make something out of it IBM.
You’re joking. You’re joking, right? Right?
Just self host the bridges. I mean if you trust your phone more than your server, this won’t help.
Have been a fan of a what I called “simplified” git flow until recently when I realized I am basically doing trunk based branching with two trunks (Main and dev). The static dev branch had its appeal for static deployments (no test deploy from varying feature branch, but still not main); however, for gitops and for general simplicity forcing yourself and the team to main has its advantages. E.g knowing that every deployment is from main.
But if not (for disaster recovery only) it is pretty cheap. Like 1$/TB/month.
Just if somebody else needs this for ZFS: https://blog.juhefa.de/posts/zfs-replace-disk/