Oncall is usually a 24/7 type of thing, where speed is a major factor, and I doubt they would want to restrict oncall engineers to on-site only.

They want people in the office, but they still want people to be able to work when they’re at home too. No shot RTO comes with blocking remote access to corp systems, or even prod for that matter.

How would oncalls be handled without it even?

Why would the PC be disconnected?

Swag was my nginx introduction, and it was mildly confusing because I ran it on docker and didn’t understand how to edit configs at the time. I’d recommend following a guide instead of winging it like I did 😅