Regarding certificates. I use Caddy for things like that. Even stuff that I don’t want publicly available. It is technically public, but relatively secure.

I use a combination of basic authentication plus a rate limit so the password cannot be brute forced. And then I have a bypass so that auth is not required on my home network. I think it works pretty well.

The aggressors are not the victims.

Your critical thinking abilities stop at “Western bad”.

Empire is evil even if you like the color of it’s flag.

Not naming it Furball Space Agency feels like a missed opportunity.