iDEAL sounds a lot like Bancontact/Payconic in Belgium.
Which doesn’t do everything Paypal does either. Others have mentioned the buyer protection, but there’s also multiple payment methods you can link to it, subscription management, and one-click payments (where it also enters your address for shipping) - and crucially: available worldwide.
.eu and your local tld are often quite a bit cheaper too!
Pretty sure the gpu BIOS is limited by default, nothing the OS can do about that.
Same for other parts like the cpu - core voltage is determined by the motherboard.
I doubt the os can just go “2V vcore” and blow up hardware.
Wireguard (which is what tailscale is built on) doesn’t even require you to open ports on both sides.
Set up wireguard on a vps first, where it is accessible, then set it up from within your network. It’ll traverse NAT and everything, and you don’t have to open a port on your network.
Tailscale is the exact same thing, just easier because it does everything for you (key generation, routing, …). Their service replaces your vps, up to you if you think that’s acceptable or not. IMHO, wireguard is worth learning at least. I eventually (partially) switched to tailscale because I’m lazy, and all services I host have authentication anyway, with vpn just being a second layer.
Kubernetes yes, but minikube is kinda meh as a way to install it outside of development environments.
There’s so many better manageable ways like RKE/Rancher (which gives you the possibility to go k3s),Kubespray or even kubeadm.
All of those will result in a cluster that’s more suitable for running actual workloads.
Your body language can indicate you’re formulating a response, which makes people less impatient.
On a call there’s no body language so if you don’t say anything for a bit people get annoyed.