more secure alt setup

[beyondmeat]

I eliminated the need for forward-auth/authelia and instead I use ssh port forwarding and a local-only traefik instance that binds to 8080. I then use dnsmaq/cloudflare to add a *.local.domain.com -> 127.0.0.1

I have a separate traefik instance for :443. This is done to keep things separate and secure as possible.
I connect to my server with ssh -L localhost:8080:localhost:8080 sshhost
then I can use sabnzbd.local.domain.com:8080 and it works. All the benefits w/o exposing those apps to the internet. On android, there are ssh apps that can forward ports, works great.