For option 1, the NAS could even be an old router flashed with OpenWRT or a cheap $80 mini PC that has a portable or internal 2.5” disk attached.

To be fair, it is confusing and I don’t recall whether the caddy docs mention it. Some applications require you to set a field called ‘trusted proxies’ and others will just work straight away.

Seafile ‘scrambles’ files and doesn’t make them available to other applications on the host, which I don’t think OP wants.

I’ve got two JetKVM units on the way.

TinyPilot and PiKVM are just way too expensive in Australia. Buying two would cost me about $1000 AUD, but two JetKVMs are only $260 AUD.

The next release of TrueNAS SCALE in October is dropping Kubernetes in favour of plain Docker/Docker Compose. That may be worth a look?