You can set up a free cloudflare tunnel on your DMZ, then expose the 32400 service vía an application in the zero trust dashboard. That would give you fine control about who can access your server (you can add security policies filtering by country, source ip, and other traffic selectors)

Damn, just finished setting up CasaOS. That looks neat. Gonna try it.

I’m using it right now with Armbian on a Rock Pi 4C with a 128GB NvME drive. Planning to move the external 8TB hdd from the main lab PC to this, and run all low power tasks 24x7, and fire up the main rig when needed using WoL. I liked the UI, and the simple install process. But now someone mentioned it, I’d like to try Cosmos.