“code local and push remote” is only more efficient if you have a faulty connection with ssh or want to use a GUI editor that doesn’t support remote connections. What you’re doing is good. You can scoure for more “modern” ways that might have more glimmer and sparkly lights, but it won’t improve efficiency.

That’s like saying the GPL goes against FLOSS because it’s a “big spooky license” people have to read before contributing

Any middlemen between the proxy and services?

You have Authentik guarding your Wireguard key on a public server?

I’m not sure how this is different from having Authentik on your home server, unless the point is to hide your IP address