TwinTurbo

He claimed he DMed the admins. I can't see any public post about it.

That's it! If you don't specify a host path, i.e. the path before the colon, Docker will create an volume which saves any changes you make to that path in the container, but won't mount any existing path from the host to the container.

Nice, looking forward to it!

CarPlay and Android Auto actually work well, and you can use the apps that you already have on your phone. The screens are generally more convenient and restrict view less than a phone holder stuck to the window. But without those, I agree that I'd rather have no screen than one with crappy media controls and the car's own navigation.

What did they do?

Yes, I think that's it. Their website really don't make it easy to figure out...

/c/titlegore

You would need to set up routes on these other devices to tell them that VPN devices can be reached through the Pi. It’s possible, but I’ve never done it myself, so I don’t have any useful pointers.

Yes. All devices connected to the VPN will have a private IP inside the virtual network. You can use these to communicate as though they were public IPs, except that they can't be used from outside the VPN.

There's also a noticeable difference with some beans. Cheap ones are tough and taste almost stale, while nicer ones are creamier and more flavourful.

Yes, you can connect the device behind CGNAT to your existing VPN as a client. Then, from inside the VPN, you would use the its virtual address to connect to it. You can use a systemd service or similar to have the VPN connect at boot.

There are a few default instances in the settings page, and you can add your own as well.