Not an expert on the topic, but I guess this will come down to companies providing the services (meta, signal, telegram…) to embed the scanning.

If they don’t force google/apple to implement it somehow for all outgoing messages (traffic?)

Google removing sideloading conveniently plays into this…

EU regulation to scan all messages on user devices

https://en.m.wikipedia.org/wiki/Dodge_v._Ford_Motor_Co.

Once you figure out how traefik is configured, this is super logical and easy. Also, you can use it with podman and qublet on fedora, so you can manage it all with systemd.

https://theobservum.com/posts/2023/2023-04-15_traefik/

Tldr; Traefik is looking at all containers and scans for labels (attributes on containers). If certain labels are set, Traefik adjust itself. So the trick is how to set those labels, which both docker compose and qublet make easy, but qublet doesn’t need a compatibility package and comes natively with podman.

In general you are not allowed to have private repos if you don’t contribute to open source.

https://docs.codeberg.org/getting-started/faq/

They do recognize that private repos are sometimes needed, so there is a guideline.