Add two factor authentifcation (2FA) to paperless-ngx
Paperless-ngx does not support a second factor by default. However, with Authelia and a NGINX reverse proxy, this can be retrofitted.
Add 2FA in OPNsense NGINX reverse proxy
OPNsense version of NGINX supports "auth_request" only very limited. 2FA apps like Authelia as authentication provider are not possible behind OPNsense's NGINX version. Nevertheless, you do not have to do without 2FA completely.
Nextcloud's high performance backend behind a Sophos reverse proxy
Nextcloud's High Performance Backend accelerates messaging on larger systems. Connected clients no longer need to poll to see changes to files. Instead, notifications actively inform applications of file changes.