Wife had to do this the other day. She catches me trying to explain and convince tech basically recommending something with an open door to say no or disagree why you like it. She says just tell them to use it and if they love you they will.

And it’s true. I have my extended family on signal.

Work on it, don’t only complain.

Still hang around both. But I’ve noticed I’ve had more to engage with on Lemmy lately, which is great.

Wireguard doesn’t send anything back if the key is not correct.

Because of this, Tailscale port swapping is inconsequential vs wireguard here.

Tailscale transfers trust of your VPN subnet to a third party, which is a real security concern.

I agree SSH service will be attacked if they are plainly exposed, out of date and allow login challenges.

Also agree that under or misconfiguration is a massive cause for security issues.

Authelia does support oidc and its amazing.

https://developers.cloudflare.com/cloudflare-one/policies/gateway/http-policies/tls-decryption/

https://community.cloudflare.com/t/does-cloudflare-proxy-servers-decrypt-my-data/145691

Afaik, they decrypt and recrypt all traffic.

I just don’t see the point of using cloudflared. Its easy to use but it just gives all your data to cloudflare in return for very little.

You should try it.