I couldn’t find one that suited me, so I continued using TickTick. I tried very hard to like Vikunja, which is probably the closest alternative to TickTick, but the lack of an iPhone/iPad app, among a few other issues, drove me back. I didn’t like using the right column to set task attributes. In my view, it requires too many clicks to set up a task with start/end times, effort levels, etc. This is especially painful on the phone. Another feature I missed in Vikunja was the drag-and-drop functionality that TickTick offers.

Out of curiosity. If someone is accessing self hosted services only from certain locations where ip addresses are known, is it a good idea to whitelist those ips in firewall and block external access for the rest?