[oskapt]

It's impossible to traverse NAT without having ports forwarded between the public and private IPs. My comment meant that I didn't want to manually configure port forwarding on my edge router back to hosts and then have to maintain that configuration and update it as things change, especially for a solution like a VPN that's going to have a lot of dynamism to the ports where it's running.

I wanted a robust solution with minimal manual intervention, and with Tailscale, Traefik and Flux, that's what I was able to build.