crandall

All good thoughts, thank you

Makes sense. Its unfortunate though that it presents a hurdle for end users. My users need to hit a webpage and acesss stuff, asking them to connect to a VPN client is too much.

Is tail scale really that much more secure than reverse proxy and auth control?

I’ve used Authelia. I like it because all the config can happen in a config file so I can easily back it up, modify it, and deploy it with Ansible

Its actually simpler than I expected to do the wildcard cert setup in Caddy. You can just add the wildcard block at the top, and leave the rest of the config as-is, and they will default to using the wildcard instead of individual certs.

I assume that’s all sound proofing. How well does it work? And like the other commenter asked, I’m curious how it affects the temperature

I still have my NES but haven’t tried booting it in a few years

I also do this, you’re good