Integration level and network routing between upstream Nestri Cloud and Nestri self-hosted

[computergeek125]

Full disclosure, I have not deployed this yet, I'm just use case auditing at this time.

I noticed on the documentation for self-hosting this package that the front end access panel uses a saved session ID on the Nestri public website.

1. are game saves (and/or other data generated during a game session) synchronized just using Steam, or are game saves additionally replicated to a different location (i.e. Nestri mainline servers)?
   a. For self-hosted, can we control where this alternate location is if it exists?
2. when the self-hosted machine is joined to the internet frontend panel, is it only accessible to those that have its session ID, or does it enter a common pool of systems that others can use? (kind of like Folding@Home or BIONC in a way)
3. what sort of authentication after the known session ID is required?
   a. On the surface the docs make it sound super open - can a machine administrator place limits on who can access their system? (similar to Parsec's setting to allow or deny friends from controlling your computers)
   b. Extending 3a, are those limits granular enough to differentate some users can access some machines, and other users can access all machines?
4. Likely related to [Pilot] - v0.2.0 #70 (comment) - is there a way to self-host the frontend as well? The linked question indicates that the website could be open-sourced at some point, but there would be a lingering question where even if the site were open-sourced, whether the self-hosted server would be able to be easily reconfigured to join a self-hosted panel rather than the main Nestri panel?
5. You mention in the readme that you need port 8080 accessible inbound from the firewall. Is this connection coming inbound from the endpoint client browser (sort of peer-to-peer, like Parsec), or is the Nestri frontend panel going to proxy this connection? Can the frontend proxy this connection if an initial browser-to-server connection fails?