Caddy + crowd sec + some kind of auth solution is what I’m aiming for though I haven’t got authentik working with it yet so I haven’t opened it up yet. I wouldn’t want to do jellyfish without the auth solution though as there local stuff isn’t so robust.

VPN in and a few local users would be the most secure if you haven’t got too many folks connecting.

I block ads in most places so I very rarely see them at this point so I think this dumps me onto some junk category as when the occasional as does get through they’re nuts. Like this one I got earlier today: