I use it in two different ways. If I am using OIDC (e.g. Audiobookshelf), then I will only use Authentik. If I need to use a proxy outpost and pass those credentials to the server (e.g. Navidrome), then I need to use NPM to do that.

I prefer Symphonium. Tempo isn’t nearly featured enough for me just yet.

Cloudflare with CloudflareDDNS

I’ve used Joplin and Standard Notes. I do use Standard Notes premium and I much prefer it.

You’re asking on Lemmy, so you’re going to get a lot of privacy related answers. For usability, Cloudflare tunnels are a super easy and free way to setup and don’t involve your family members having to VPN into your network with Tailscale or Wireguard. This is especially useful if they are streaming from a smart TV or media stick.

Is it the most privacy-friendly? No. You’re giving up a little bit of that for convenience and lower maintenance. IMO for my threat model, it’s worth it.

I’m on Jellyseerr awaiting the day that Overseerr receives its decoupling update to allow Jellyfin servers.

Most private trackers don’t allow a shared VPN like Mullvad anyway. Some do but most don’t.