[e12e]

I would recommend just using a VPN, like tailscale, for all non-public resources - rather than IP whitelisting.

Ed: including private web services like self-hosted gitlab not used for publishing public projects.

[hugocbp]

It's on my list to try. Haven't sat down to actually try using Tailscale with servers yet but seems like a good option. Thanks!