I just use ansible to generate all wireguard configs and deploy them. Works great, but then, all my devices have static ips.

No, it doesn’t really make sense for 2fa to have both factors in the same database, I use yubikeys with webauthn.

pass.

It’s simple and has frontends for all my usecases. It’s so simple, that you can extend it’s functionality yourself if you wish.

Synchronizing works by just synchronizing the folder where the data lives, so syncthing, git, dropbox, ftp. Whatever you like.

Tuxedo is working on one, they said it might be ready by christmas.

Evolution, I wish I could use Thunderbird, but that crashes when signing mails with my Yubikey.