I'm struggling with the Company Portal. What is the correct way to roll out that app during Autopilot? Right now, it seems to be throwing errors that break my enrollment (just the generic errors about an app failed to install) and while it's a given I'm doing something wrong, I'm wondering how to rectify it.
I keep thinking about things like SSO and it's got me curious, how are all of you locking down your public-facing services?
Currently, I've got only a select few - primarily Seerr, Immich, Mealie, and FoundryVTT - publicly exposed via SWAG (with geo-ip blocks) so that friends and family can access them without needing extra apps like Tailscale on their devices.
I know all of the services I make available have their own login prompts, but knowing how some projects can be, I figure things could always be more secure, so I'm curious to hear how everyone else does it.