@atpfm Cloudflare access need not be scary!
i set it up for me and my brothers plex media server,
you can think of it simply as a gate from any random accessing your service vs who you allow.
in conjunction with cloudflare tunnels, it could be a very convenient solution to auth gating private services.
(if you want to go hard manual server route, i have also set up caddy (web server like nginx/traefik/pache) forwarding auth to 'authentik' (which allowed me to do passkey auth)