All good thoughts, thank you

Makes sense. Its unfortunate though that it presents a hurdle for end users. My users need to hit a webpage and acesss stuff, asking them to connect to a VPN client is too much.

Is tail scale really that much more secure than reverse proxy and auth control?

I’ve used Authelia. I like it because all the config can happen in a config file so I can easily back it up, modify it, and deploy it with Ansible

That’s not the same thing. I didn’t say that.

Ethics aren’t black and white but shades of grey. There are indeed more and less ethical choices to make within capitalism.

“Everything is unethical therefore I don’t have to make ethical choices” is bad logic and morally wrong

Its actually simpler than I expected to do the wildcard cert setup in Caddy. Its not necessary to nest everything. You can just add the wildcard block at the top, and leave the rest of the config as-is, and they will default to using the wildcard instead of individual certs.

I assume that’s all sound proofing. How well does it work? And like the other commenter asked, I’m curious how it affects the temperature

Ah I didn’t see that, might have been blocked by my ad blocker. Still found it weird how it just kept referring to “a YouTuber” instead of saying his name.

https://www.youtube.com/watch?v=ncCf00M7Axk

They really took pains not to mention the name of or link to this YouTuber… I want to see it

Not to mention the artistic theft

I also do this, you’re good

Be an actual companion