Thank you! Fixed :)

Are you referring to this? https://boardgamegeek.com/boardgame/344554/decorum

Google docs is a no-go. But I was looking at etherpad indeed.

Thank you. I’ll check again what it proposes.

Then I have to pick a system. I’ll check if I can play without a system or something which is out of our way.

I didn’t see that I could just create character sheets and adapt then during a session. Can you?

Self hosting the frontend is eas but since 2 weeks, the frontend doesn’t connect to the backend, a private company which updated theeir API.

Still thank you. I’ll check.

I would like to draw a table, add words and numbers, and that’s all. I don’t want to have to code anything. I am GM-ing Blades in the Dark, with Deep-cut, and some things we took from Fate and others. I want to be able to freely create anything, even in the middle of the session. We don’t need automation. I want simplicity.

Yes. The backend service they rely on has changed its API and they said that they have no plan at all to follow. I discovered them only after they left peerJs (an alternative, which is interoperable and open source).

Thank you but it isn’t self-host-able.

Yes, but it is closed source and I heard of plug in to add games and so… I don’t want to have a table for few stats and items.

Still thank you for the idea.

On you server: tcpdump -ni any tcp port <your server port>

You will know if your traffic reaches your server and to what it has to respond to.

It feels like NAT issue to me. Or DNS :D

Apologies for the delay. On the VPN termination point, you have to set the allowed IP addresses. On the case of a client, a /32 is enough. It means that only this IP would be receiving responses. A client with a different IP address would be able to inly send packets, not to get any back, thus not able to get a TCP session. I think it is enough and rhat no additional FW rule is needed.

Is Termux still up to date? I thought it wasn’t available on android anymore. Is it on something else?

You don’t really need forwarding as you don’t need NAT here.

A part of the filtering can be done by wireguard by setting the allowed IPs correctly. Just check if only one service is listening on the server port you’ll allow.

Now a question: all without tls right? ;)