Oh, didn’t know Forgejo was ever intended to have federation. That’s so cool!

I’d say go with LineageOS

I run it in a rootless Podman container using Quadlets. Instead of opening the server’s ssh port, I only port-forward the container’s ssh port (e.g. 22 -> 2222). I have sign-ups enabled, since I want people to be able to contribute (or just create issues). But I have configured the server so that nobody can create a repository. They can still fork my repos and send a pull request.

I have yet to experiment with Actions. I assume the safest option would be to only enable it for my own commits, but I am not sure.

Well, some people called me paranoid and said “us regular people don’t have anything to hide” when I told them how much data Meta collects about us. Of course, this frustrated me as my threat model is very small compared to most people here.

I explained how free services where instead the user is the product work, and how much I disagree with this model. I informed them that I use FOSS almost everywhere and that they exist for the greater good of humanity.

Signal’s not great for privacy either tbf

Why do you think so? Yeah, it is not anonymous due to requiring a phone number, but all media and metadata are end-to-end encrypted.