ProblemHomelab and remote admin needed to be reachable without putting management planes on the public internet.What I builtUniFi for the LAN, Tailscale for identity-aware access, and least privilege on who can reach which host.ResultRemote access that is specific, logged, and not a port-forward. The network stays closed; the people who need in still get in.