[Sektor]

Have set this up many times for less tech-savy friends. What I actually did was have them install docker-compose and provided them with a compose script to build up the latest version. I wouldn't use it myself though, I don't think I'd sleep well at night having a single factor auth webserver with access to my entire network.

[lvs]

I suppose you could set up a VPN that supports two-factor, then put the server behind it.

[khaki54]

just require mutual auth (certificate based authentication)on the reverse proxy. extremely simple 2 factor auth

[snuxoll]

Dunno if I’d call dealing with your own SSL CA “simple”.