tomspark wrote:
Yep — router-level port forwarding is still on you. NPM on SparkBox terminates TLS and proxies inside the NAS, but it doesn't bypass your router's NAT. Forward 80/443 from the router to the NAS LAN IP, then NPM does the per-host SNI routing. Two gotchas: some ISPs block port 80 (test from outside the network to confirm both reach the NAS), and put auth in front of anything you expose publicly — SparkBox defaults assume local + VPN access.