@a2es I actually have found it easier to remove my infrastructure from public visibility with tailscale, let it mesh secure both local (wifi) and vpn connections autmatically while broadcasting hostnames for me to my other machines, and then just use pure http again everywhere. There are a few things that don;t work directly this way yet, such as accessing docker containers, though.