If the HOA’s router supports UPnP/NAT-PMP/PCP then you might be able to use that to get some ports forwarded.

Is it possible to send the hint from OPNsense itself?

Yes, to me it sounds like you’re already getting a big enough prefix from your ISP (all devices getting a /64), but you’ll have to request a bigger prefix from OPNsense. I believe it should give you the options to do this when you set the IPv6 mode to DHCPv6 on OPNsense, but I can’t say if your ISP router will handle it.

I have also added all Cloudflare IPs in Jellyfin’s known proxies

You should only need to add the IP of the last proxy before reaching Jellyfin, which would be Caddy.

If you can’t get the VPS to work, alternatively there’s Cloudflare but last I checked streaming was a little out of their free terms. With it, you should just have to set your AAAA record and make the cloud orange, that way Cloudflare will proxy it, and IPv4 will work. There’s also Cloudflare tunnels which lets you host websites without port forwarding anything.

I doubt this will be any use, but my Telstra 4G has a public IPv6.

Yeah, I’d avoid the cloud version, but SNMP monitoring on the networked version is nice when you want multiple things to shutdown without relying on a single host.

Cloudflare Tunnels will let you proxy any port, as long as it’s HTTP(S) or SSH, even on free tier.

Also I believe there’s a thing now for proxying other ports anyway on free tier without tunnels, but I haven’t looked too much into it.

if you want to use different SSID for different VLAN

With newer versions of the controller you can actually use PPSK for a different VLAN per password (same SSID), but at the moment you’d be stuck using WPA2.

That’s true, but because of that you can get Cisco certifications, which could be helpful if you end up in an network related job. Those certifications will also give you a lot of knowledge of how networks work. (I’m currently completing a CCNA, and quite enjoy it)

A few other companies also clone the Cisco CLI, so there’s that too. I wouldn’t touch the Web UI if it has one though.

He’s saying you’d probably have more luck finding any simplified photo editor, rather than limiting yourself to just hosted. Something like MS Paint or KolourPaint but I don’t believe they will let you rotate text.

Came across these HP NC522SFP 10Gb NICs

Yeah I have one and they’re pretty good, and I haven’t had an issue using it with generic stuff.

any 10Gb SFP switch

Some switches from bigger companies (like the ones listed on fs.com products) are vendor locked, but you should just need a DAC cable compatible with the switch to work.

a transceiver to get the link from the ISP to the router

Correct! Make sure to get an ethernet/10GBase-T one, because there are other transceivers.

would be easy enough to do some fiber runs there, and it’s all short.

I did forget to mention that you would need more transceivers to convert between the fibre and SFP+, and they are rated for up to different lengths but they should reduce their power for shorter distances. They also come in different speeds too, but unless you’re really strapped for cash, it’s not worth it to go below 10G.

I currently have a 300m ones doing a run of 30m, and I’m about to do a 10m run too. Also these are about AU$10-$20, I find FTLX8571D3BCLs the cheapest, but there are others. (I actually got mine for free off a guy on Reddit)

Also 10G is really cheap if you go with used SFP+ gear. Like I’ve got a managed 48x 1G + 4x 10G Dell switch I got for AU$78 running my network. The NICs are about US$40 used, ConnectX3s seem the cheapest, I usually use Intel X520s which are a little more (watch out for clones though).

For the accessories: DACs are AU$20 new from fs.com, and because you’ll probably need ethernet for that router, a 10GBaseT transceiver is AU$90 new off eBay. Those you could probably buy cheaper used too.

Additionally you wouldn’t be adding 10G to all your devices, I’d just definitely do between your router so you can have 3 1G devices maxing out your 3Gb internet, and maybe add it to a server or two.

And if you do your own runs, in my experience, fibre is slightly cheaper for the longer runs than CAT6 itself too.

No worries! I’d probably prefer bridge mode instead of double NAT, but I guess whatever works for you.

Or alternatively something like tailscale will also work without port forwarding.

Oh so you’ve got double NAT. You’ll either have to put the modem into bridge mode, or port forward on both the router and modem.

Do you have CGNAT?

If you run traceroute 1.1.1.1 the first hop should be your router, and if the second starts with 100, 10, 172, or 192, then you probably have CGNAT.

Have you port forwarded?

The ports are 80 for http, and 443 for https. Oh, you’re using 9091

Cloudflare Tunnels have a basic reverse proxy built in, so you could technically still have one and eliminate Traefik.

However, I still use one for nginx, and one for each important app (frigate, home assistant, probably others), plus an extra on a raspberry pi as more of a VPN if my wireguard server goes down.

You might be able to manually create NS records for @, but I’ve never tried it.

Add an IP to one of the bridges, Proxmox will then use that bridge with that IP.