teleport VS vouch-proxy

Teleport is like Barrier/Synergy, but only works on Mac. The advantage is that it supports a lot of mac-specific features that Barrier doesn't, like trackpad gestures and rich clipboard syncing.

Have you tried this?

teleport (great, free)

Apple calls this "Universal Control" and it works with iPad and some selected Macs. Solutions like this have been available forever on Macs (not iPads) and still are valuable if you use an older Mac. Free ones are eg teleport and barrier. There are many more.

Synergy is cross-platform, but not free and a "company" I despise. teleport is small and easy to use, Share Mouse works, but won't let you log in (IIRC), barrier is a Synergy look-alike, free and quite usable.

Same, Synergy for macOS / Windows / Linux connectivity. I use teleport for macOS to macOS. Teleport supports touchpad gestures perfectly unlike Synergy.

I’m not sure how well it works but there used to be some software called teleport for Mac that would move the mouse/keyboard to the other computer when you moved off the screen. Like a software KVM switch. https://github.com/johndbritton/teleport

If you want it between 2 Macs, just use Teleport. It clearly inspired a lot of the Universal Control features and supports everything like trackpad gestures, cross-device drag & drop, etc.

For those who can’t wait for this feature to be released, I’d recommend the excellent Teleport as a free alternative to Synergy. It’s limited to Mac only, but it’s great at what it does. https://github.com/johndbritton/teleport

Look into vouch proxy

Vouch proxy is designed for this usage: https://github.com/vouch/vouch-proxy I don't think there are any nice UIs to configure it though so you'll need to be familiar with running it yourself.

Not sure this is a "best practice", but it lets me keep control of the Ingress resources inside their YAML configs. I've also layered Vouch Proxy into the ingress configurations to require SSO/MFA auth to access the resources behind the Ingress. Cloudflare has the ability to do this, but I found it cumbersome to keep track of the configs outside the K8s cluster.

I've used vouch proxy for my own stuff previously, before more recently moving to Cloudflare Access. vouch can be slightly janky at times to get working right, but once set up, it's been solid.

For example: nginx -> Vouch proxy -> KeyCloak -> Jellyfin

While this works, we were hoping to make access a bit easier with say an OpenID Connect SSO and reverse-proxy solution. I've seen Vouch Proxy, https://github.com/vouch/vouch-proxy which is really just SSO on top of nginx, but I'm wondering if there's a simpler way to do this.

You seem to be quite knowledgeable and a minimal provider with just the bare minimum would suffice for you. Have a look at Vouch Proxy, it does one thing and it does it well.