The requirement of managing an LDAP or AD directory service just to get some auth for NFS is a dealbreaker for like 99% of people. It’s such a dumb protocol for the average user and was designed with only huge corporate clients in mind.

Just give people a simple password auth or let them exchange private/public keys between the devices that need to connect!

How are you running Beehaw? At least on my Proxmox VMs I can take a snapshot in a few seconds thanks to ZFS having it built in and QEMU guest agent letting the host ensure the guest is properly stopped quickly.

I cannot fathom what a respectable website would need with a port scan. They should normally just be listening to/broadcasting on 80/443. Is it looking to see if the normal html ports are remapped? That’s the only reason I could imagine.

Finally, I can create a true American city filled with parking garages everywhere and a desolate downtown filled with office towers that sits vacant in the evening and weekends.

I find Nix to be a really esoteric platform that completely inscrutable to a regular user. The people who do use it are extremely hostile to any tools that simplify the experience for the end user like Fleek. I would not recommend it for ANY regular user in any way, shape, or form.