✓ HTTPS via Let's Encrypt
✓ DDNS via duckdns.org
✓ Reverse proxy: Caddy
✓ Synapse MCP at /mcp
/mcp
Host: bunkermain.duckdns.org → 192.168.1.247
bunkermain.duckdns.org
192.168.1.247
Tailnet: 100.71.218.58
100.71.218.58
Server hardened 2026-05-25. R520 successor.