Which is why it’s third-party audited every year. It’s transparent for any issues rather than any other solution out there such as OneDrive that obfuscates completely.

https://smallstep.com/docs/tutorials/ssh-certificate-login/

https://sssd.io/

https://bitwarden.com/help/cli/

If you’re concerned about security audits they do those regularly too

https://bitwarden.com/help/is-bitwarden-audited/

In addition to free as in source, they are respected because they have a high-quality, certified, third-party audited product.

HD Base-T does exist but I know what you mean.

This might help

https://blog.pishop.co.za/using-a-raspberry-pi-as-a-bluetooth-speaker-with-pipewire/

Your response clearly states publicly accessible DNS. A CA does not require anything public for local SSL and can work in conjunction with whatever service they want for that which is public.

public domain for internal services

I guess they need a CA then

https://smallstep.com/docs/step-ca/

https://www.freecodecamp.org/news/docker-nginx-letsencrypt-easy-secure-reverse-proxy-40165ba3aee2/

Raspberry PI

Amen