What’s bad about it? I’m a Linux admin by nature but an admin of all by profession and overall I have no real complaints about Teams. Has always worked just fine for me and to my knowledge everyone else.

Why tip someone for doing the their job?

I know this reference!

I don’t understand how to read this graph.

Let’s see the rule(s) then

Just configured your mail clients pop/IMAP server as your fetchmail target and SMTP as your hosted service.

Yes and what exactly is a radical feminist to you

In the scope of wireguard it’ll just be a matter of you building appropriate firewall rules.

Since you want their internet traffic to go through you then i assime you’re effectively pushing a 0.0.0.0/0 route to your clients. You then need to add firewall rules on your server to block traffic to its local subnet and in the future allow traffic to only your jellyfin server.

This is also pretty simple and nothing wrong with that setup.

You did not answer what VPN tech you are using.

Without that knowledge i would recommend setting up tailscale and having your users use that. If you want to be fully self hosted you can also run Headscale as the control plane instead of relying on Tailscales own service.

I recommend tailscale as it is very easy to grant a user privileges to ONLY use an endpoint as an exit node but also grant access to any other endpoints as needed (such as your future jellyfin server) via theor ACLs.

Best practices comes down to what you do or do not want the VPN clients to access. This mostly comes down to routing and firewall rules.

So, what should your users have access to?

Also what is the vpn?

I’m not entirely sure what the actual question is. Can you rephrase what exactly you are trying to accomplish?