Taasz/Woof

Pangolin would work, it’s still wireguard underneath but with a webUI to set up things and simplify it. It’s fairly easy to install on your server with their docker compose examples.

The built in windows defender is very good, no reason to pay for or install anything else.

Plus if the general requirement is ‘high quality code’ then that automatically excludes the majority of LLM usage where people just vibe code it and rely heavily on the LLM to do the work. VS someone writing their own code while using an LLM to help find problems.

What does these “tunnels” actually add?

Ease of deployment / time savings generally. You can certainly do it yourself with wireguard and a reverse proxy.

Self hosted alternative is buying a static IP from your ISP I suppose. Mine is an extra $5/mo which is eh, but I’m not paying for a VPS.

I think “the submitter is entirely responsible for their code” is a very reasonable position.

Especially since I just don’t see how it’s possible to fully prevent people from using AI if they want to use it. Yes a lot of code might be more obvious and could be rejected with an “absolutely no AI policy” but some people will submit perfectly good code where AI was involved in some way.

Performance on opnsense is fine for anything you’ll be doing at home, so I wouldn’t factor that into your choice.

Features on opnsense are probably better, just due to all the packages you can install.

Do you prefer being 100% in a CLI all the time? If not I’d say opnsense, the GUI certainly makes things a lot easier when you’re not fully familiar with something and spending every day interacting with it.

Is it just you that needs access? VPN like Tailscale or Wireguard is the most secure option then, as it’s not exposing any services to the internet.

Otherwise a reverse proxy in front of things like Traefik or Nginx, make sure things are automatically updated ASAP, and make sure auth is enabled on the services.