My setup doesnt matter, I don’t use Unifi for my main home infra.
You can use the Unifi device itself. Teleport is just a single click Wireguard service, with no need for port forwarding or additional configuration.
Last I saw it, you can export the config from the browser for use with client devices, you can use that with wireguard tunnel and set it as always on.
I am, though I’m not using unifi.
Teleport is just Wireguard with unifi stacked on top. You can just export the config and its literally a Wireguard connection. Unifi Teleport is just using their online services to replace a step.
But teleport (which is Wireguard under the hood) is not meant for an always-on connection, its meant for ad-hoc connections.
So if you want always on, export the config and run it as a Wireguard tunnel. Its exactly the same service, running on exactly the same device, without using wifiman and allowing for an always on VPN.
If you want it to run all the time, I’d export the config file and use Wireguard tunnel rather than wifiman for teleport.
VPN only access for just you is a perfectly appropriate solution.
Unifi teleport is a Wireguard VPN.
If you want to access your internal devices/services from elsewhere, and dont require public internet access, yes, this is perfectly fine.
Traefik (and other proxy tools) are generally used for public internet based access, not VPN.
Debian for my workstation desktops, servers, etc, anything that’s stable.
Arch for playing around with new toys/features.