My answer won’t be as popular, but it’ll definitely get the attention of the right people on the customer’s side: charge HANDSOMELY for issues caused due to customers using the systems outside of agreemed to or published best practices.

Which includes the Steam client. It’s a CEF-based application.

Fair take.

I’ve got a static IP for Truenas now with an internal DNS entry pointing directly to it for smb and another DNS entry pointing to Traefik for the web UI. Annoying to have 2 names for it and was hoping to not have to, but this may be where/how things stay.

Not all. This is all internal. I got annoyed with with insecure warnings for all the internal stuff that runs on SSL and fell down the Traefik rabbit hole after watching TechnoTim’s video on the topic.

I’m not sure that’s right, in the routers section of the Traefik docs they say…

UDP routers can only target UDP services (and not HTTP or TCP services).

Feels possible, just not widely documented. I could be completely wrong, though.