Interesting. Is it fair to say you’ve created a web interface to standard image manipulation tools ?
Your huge reason is the padlock in the browser bar? I’m not against TLS internally. I do it myself with my own CA. For this particular instance and the unique requirements, it seemed easiest to avoid TLS.
I applaud your accomplishment as a penetration tester. I am disappointed at your lack of understanding regarding non-public networking.
Move your VPN to your router. Don’t bother with HTTPS on anything not exposed to the Internet.
If that does not satisfy your concerns, you may want to give up using electronic devices.
Doesn’t seem to be possible to self-host
Curious how this compares to Watchtower.
TL;DR: Op needs to sort out reverse proxy with SSL/TLS.
Well, unless you feel like writing that feature into this project, perhaps you could modify your requirements slightly. Copying your local file to a share that’s also mounted to this handbrake-web instance would accomplish the same goal - taking local files and having them processed by this backend service.