HegemonSushi

I was thinking more along the lines of simply thowing up a port to SSH into. No Fail2Ban and no keys, just a password.

I would just containerize and reverse proxy, but I understand the hesitation, wireguard would be preferable.

Any reason you prefer to wireguard into Navidrome instead of reverse proxying to a domain?

You’d hope, but I have a few friends who simply port-expose their media servers.

I guess it could be worse if they had ssh exposed.