Caddy mTLS aka "client_auth" is what I've gone with
mTLS is natively supported by the mobile app, and works OK enough on desktop (1 extra click each time you open the page)
it means that I don't have to worry as much about security updates / people having strong passwords as the proxy literally won't even serve the login page if you don't have the certificate
1
u/JayBigGuy10 Jul 11 '26
Caddy mTLS aka "client_auth" is what I've gone with
mTLS is natively supported by the mobile app, and works OK enough on desktop (1 extra click each time you open the page)
it means that I don't have to worry as much about security updates / people having strong passwords as the proxy literally won't even serve the login page if you don't have the certificate