I d rather have 2 to 3 (for critical, mid, and test systems) ssh keys that are regularly rotated than 1 key per machine. I m not gonna balance 50 ssh keys; neither enter my password every time i jump hosts.

Get a 10GbE nic and OpenVswitch

Easiest Solution imo:

• get Wildcard DNS, point it to the public IP of your NAS
• deploy the ssl cert (containing your main domain and sudomains for your docker containers)
• configure reverse Proxy in Synology configy proxying requests for the subdomains to your docker container (you can enforce only local access to certain services too)
• Static route or local dns (Pihole) to redirect local requests for your public ip to the private IP of your NAS
• done!

Well without a public API it may be quite impossible to mass delete stuff (for non EU-citizen at least, EU citizens can always do a GPDR delete request -otoh you basically have to connect your reddit account with your real name to do that so big nope as well) in the future, so i fully understand why so many people did it

Will it cause collateral damage? Yes. Am i happy I did it when it was still possible? Fuck yes.