Wireguard

1. No open port: how my phone reaches Paperless

   Pulling an invoice out of my own archive from anywhere, with not a single port open on the router, and measuring whether everything really is encrypted.

2. Running NetBird yourself: the matchmaker that steps aside

   A small server at Hetzner introduces all my devices to each other and then stays out of the way: what runs on it, how I upgrade it without risk, and which traps cost me hours.