Anything that is exposed is done through nginx proxy manager and 2FA is enforced on those apps either through the app or through Authelia.
Some of the exposed apps are shared with friends and family so easier to expose securely than mess with VPN for them.
Anything else is only accessible via VPN on my router.
I need to look at tailscale.
I moved from mullvad to ivpn and now again on the lookout. I guess i2p is “the future” but right now I’m not sure how that works with private trackers.
Whilst you can still torrent without port forwarding I don’t think seeding works right?
You as an admin can configure it for each user and I assume it would authorise to their account. However no way of doing this from the user side I don’t think.
Your mum is so fat she is on A and B.
Do you know if ProtonVPN supports port forwarding on Linux or via Wireguard? I have read it only works on windows. It’s between that and IVPN to replace Mullvad since they dropped port forwarding.
Orion Browser allows full extensions such as ublock origin. That helps but I found even if the steam plays on the iOS device the Airplay stream won't work due to some odd encoding the website is doing.