h0rnman

One of the most iconic bbq joints in one of the biggest bbq towns (Joe’s KC, formerly known as Oklahoma Joe’s) started in the back of a gas station and it’s still there today

Ya - or close enough (10.11.3). My LAN networks are my server and workstation subnets (both /24s) and my external NAT (my public ip). I also have my reverse proxy address (from jellyfin’s perspective) in my known proxies. From there, my external users are set to allow remote connections, have passwords set, and are set to “hide this user from login screens” and my internal users are set to NOT allow remote connections and to NOT hide from login screens. After that, i just use my public dns for every device whether it’s internal or external and call it a day

You can already do number 2 (with some restrictions). You have to set up your networking tab correctly, use blank passwords, and uncheck “allow remote connections” for the “local” accounts. i have things set up so that external users are forced to log in and local users just pick a profile. If you also add your external users’ IP addresses to the LAN Networks box, they’ll be treated as an internal user too (though how you keep that up to date is a bit more challenging). It’s not precisely the Netflix experience but it works well enough for us