I use kanidm because the footprint is lower than the alternatives you mention, and it’s written in Rust.

Vautlwarden as a service is great and since it’s GPLv3 licensed there’s no way that can be shut down. But the client is another matter and maybe that doesn’t stay open for using it with Vaultwarden forever https://www.osnews.com/story/145029/get-your-passwords-out-of-bitwarden-while-you-still-can/

Around here employers gets to pay trillions if they even put themselves in the position of snooping on employee data , like location, without a distinct need for each individual they snoop on.

You can bake haproxy and acme.sh into a container yourself. Haproxy is hands down the best performing/least resource consuming RP. Dynamic management, like mimicing Traefiks service discovery, can be a bit tricky though. Yes, it doesn’t support ACME itself but once you get passed the “hello world” RP’ing and need something more advanced, like ACME DNS01, Haproxy with acme.sh is your buddy for life.

Do you know what happens to trademarks and patents when a country starts threatening its (previous) allies with military invasion and tradewars, and start undermining the values of those allies? You’re right! It goes into the square hole! Heck, maybe I’m going to start a new software company tomorrow called Microsoft, and then threaten left and right with all crazy shit if anybody complains. Nobody will care about US trademarks since US disqualified itself by now.