I use GeoIP restrictions on WAN and use a TLS offload on a load balancer in front. Problem is the older members in my family look at me weird when I give them a URL, username, and password. They just ask if they can use their Apple or Google account “like we do with Plex”. So…for now Plex stays.