>>153922
I have finished my linux and automated everything I want, I will now seriously set up the server and I want to achieve maximum anonymity and privacy too.

I would make a network consisting of one machine - the server. I would ban internet like ipv4 ipv6 stuff entirely and only allow LAN addressing. The machine itself would be set up to have one gate with mandatory TOR for all traffic with OpenVPN. So externally you can access it only through at least 3 TOR nodes in series, and once you are inside you can only use LAN.

I would set up login for each user so that I can kick them out if I suspect they could be snitching at some point instead of one key for all access. Anonymity here is not necessary because I will not snitch and I don't judge. I could also make separate user accounts on the server machine so that they can host stuff themselves and assign each user account with a LAN address but I don't know yet if it would end up being unnecessary bloat.

I could set up everything else within that network on my account, like a mandatory youtube clone, music streaming, irc, matrix server, crypto nodes for our convenience and anonymous shuffling and a TOR node to obfuscate traffic even harder. I would set up a default website listing services/websites inside the network to everyone who connects to browse.

For security reasons I need to figure out to accept logins after I manually make sure they don't use windows or other spyware so that copilot does not snitch or mac shit does not snitch, so that when your system fingerprint changes - they need to apply again or return to a system I had accepted. Fingerprint whitelisting.

Server will be encrypted and bootloader will have such a small partition that nobody would be able to set up a RAT while I am away without b0rking it all, but I am not sure if you could go around it if you were determined. The case for server will be set up in a way that if you open the front of the case to access it you would also flip a power switch to power it off, so that you could not even attempt extracting RAM. I would also back it up from time to time and store my most crucial data off-site so that even if the gear gets taken away and me locked up - a friend could revive everything with the backup iso the same evening I get booked into jail.

I'm quite bad at networking and I am not sure what correct terms are and whether above solutions are feasable or sufficient. I did not take any computer science classes really.