basicauth
: https://caddyserver.com/docs/caddyfile/directives/basicauthmost reverse proxies have SSO tooling that you can set up pretty easily
But honestly, have you considered just using wireguard for these cases? It’s much more secure if you just want a bunch of stuff hidden from the rest of the world
I don’t know how well your box performed, but I recently snagged a fujitsu esprimo box with an i5-6500. It has 5 sata connectors and two m.2 slots. There’s space for two hard drives and there’s like 5 low profile PCIE slots (2x x16 and 2x x4 I believe)
I think they’re a great deal (if you get the right CPU). Apart from the weird OEM PSU and motherboard, it’s a pretty bonkers box, and I got mine for 40$, which was very lucky
try wg-easy. it’s on the docker hub and it makes setting up a wireguard tunnel incredibly easy (as in, press the add button). The initial docker configuration process was a bit annoying to me since I had no prior experience, but most of the issues were down to the dns settings, which I eventually figured out.