@harblinger@wizard.casa @theorytoe@ak.kyaruc.moe seems reasonable. or bind it to wireguard only and stub dns records via split-brain, dns01 challenge and you’re solid. i would worry too much about the clanker unless you’re in the cyber verified program to do actual sims and red/black team activities. and yea request could come from the host but it’s not going to just create one on its own. provided you control the host. i also use it for musak away. what plugins are you running. and how do you like 12.3 version? it’s working well for me. (been in jellyfin for years. keeps getting better)