Here I am, half a month later, and I've done nothing with the Traefik rework I was referring to. Yep, that's me. Procrastinator extraordinaire. On the other hand, I finally got around to looking into CloudFlare's Zero Trust/Argo tunneling. And now this site is hosted through it! Fancy. Not sure I particularly needed it, given I have a perfectly usable IPv4 address that doesn't change too often, as well as fully routable IPv6, but here we are. A little bit more security, even if it's at the cost of being further beholden to CloudFlare, is not all that bad of a thing. The rest of my external appliances that others use are now tunneled as well, and given zero trust access where applicable. Due to limitations in the endpoint software, I can't expose all of my services that way, so I think I'm mostly going to stick to a VPN implementation to just access my network directly for myself, but it's nice to have options.