Not about certs, but I found the opposite moving from Caddy to Traefik: in amending the caddyfile, I had to restart the Caddy service which would kill any open connections that were being used. In Traefik, it’s dynamic, so can update the services without having to restart Traefik itself.

My main move to Traefik was due to file transfers for reverse proxy services like File Browser slowing down after a period of time, whereas in Traefik, they stayed at a constant speed.

I now run Traefik as part of Pangolin, so most config is set by that.

Not a perfect solution, but I use NextDNS which has profiles, and can set allowed services and times of day for them, Online Games, Video Streaming etc. This is set in the phone’s DNS setting so works via WiFi or cellular.

I’ve started to use the excellent DNS Toggle on my phone to quickly enable/disable it for the really annoying sites that block ad blockers etc.

In terms of app control itself, I still use Family Link begrudgingly as well like you for Android phones. I access it via the web page which thankfully still works so I don’t have to have the Google app installed.

You can try Colota as a way of recording your phone location with its own filtering before it uploads to Reitti/Dawarich

I have my important server stuff (docker and immich etc) duped via syncthing to an old external USB drive attached to my office mac which then has Backblaze Personal Backup running. That backs it all up with no storage limit for £70/year on their 2 year plan.

The only downside is if the drive isn’t connected for a few days, it checks it all again on reconnection.

I have about 4TB of files most of the time.

This way I have 3 copies of my files: 2 local, 1 remote.

EDIT: forgot that I also have 1yr retention on the files so in theory I can grab anything that I deleted up to 1yr ago.

So this has been interesting to me as I’m travelling at the moment and wireguard has been blocked on the guest wifi I’ve been on across the hotels, I’ve had to rely on cellular instead.

I’ve just tried Teleport on my Unifi router and that works. I believe it uses wireguard, and it is taking up to 20secs to connect, but I’m now curious as to what it’s doing to bypass the VPN restrictions that are blocking plain wireguard.