There are minecraft reverse proxies, so, yes, a http proxy will not work, but the general idea is still viable and doable with very little effort.

Set up a few domains all resolving to one IP. Run itzg/minecraft-router and use that to proxy the traffic to different servers based on the domain.

Also, they don’t even need a reverse proxy, but just resolve the domain name to the IP (in the simple case of one domain name per I0). That can be accomplished by hosting their own dns server, editing the hosts file or just pointing a public dns record at the private ip address, which will only work in their network,l.

No, it doesn’t really make sense for 2fa to have both factors in the same database, I use yubikeys with webauthn.

pass.

It’s simple and has frontends for all my usecases. It’s so simple, that you can extend it’s functionality yourself if you wish.

Synchronizing works by just synchronizing the folder where the data lives, so syncthing, git, dropbox, ftp. Whatever you like.

Tuxedo is working on one, they said it might be ready by christmas.

Evolution, I wish I could use Thunderbird, but that crashes when signing mails with my Yubikey.