fightforlife

An Idea I am also using for other things where I do not want to use a VPN:

1. Setup a reverse proxy (e.g. traefik)
2. Setup an oauth middleware for everything (forward Auth)
3. Create rules to exempt very specific request based on IP, headers, etc… from the middleware.

In the casting use case you have to find a request and check if there is any parameter that you can use to safely whitelist the request. Ofcourse someone could get behind this and fake the request to match the whitelist. But without knowing that there is even a whitelist no one will really try

The feature list sounds even better than adguard home. I might give this a try!

A big problem for me is, that Android is not allowing custom DoT servers. Even though the system supports DoH and is even using it for their built in resolver (Google/cloud flare) Networks that only whitelist TCP 433 (some guest wifis) will fail to use DoT.

Which fom factor do you have? And did you install powertop and tlp? The newer Intel CPUs need a little more power in idle. Old comment as reference: https://www.reddit.com/r/homelab/comments/m4oif7/comment/gqvs35l/

I had an optiplex 3060 micro with 8500t, 24gb ram and 2 ssds idling around 3-5watts.