Don’t feel bad, I have spend hours looking at the same thing overlooking the simple mistake. Glad I could help

I did a ninja edit about ports, but in your labels I only see web as an entrypoint

Edit, nm I see it not used to using labels for configuration it seems

Your entry point says, web should you not also have web-secure as well. I’m in my phone to forgive me if I missed some details

Edit: Not familiar with pod man, but are you should the port for the service isn’t 80 and not 8081 since it should be routing inside of podman?

The nextcloud client has the option to setup the folder as a virtual folder. this wouldn’t sync the files locally but would download them on first access, kind of like how OneDrive works. Would this not work for OP or did I miss read

Isn’t that what a TPM could be used for?

Tailscale/headscale are always recommended and they are good options but I want to recommend netbird as an alternative. This is what I have currently setup and it’s fantastic.

I have been looking to do this as well, I’m just not 100% sure how it all connects together. Do you have the disk shelf connect to a server with lots of sas cards?