Thank you for your post. A double-NAT layer can mean two things:
your ISP is imposing carrier-grade NAT (CG-NAT). This will require you to either request a dedicated external IP address from your ISP or resort to Tailscale for NAT traversal (see below).
you have two routers between RoonServer and the internet. In this case, you’ll either need to:
a) deactivate one router (bridge mode) or
b) create an identical TCP port forwarding rule in both router settings pages that points to the IP address and port number listed in Roon Settings.
Tailscale is an easy solution for double-NAT - you simply install the VPN on both your RoonServer machine and on your phone, and it creates a proxy-mesh connection even on cellular data. No port forwarding required.
Thx Connor, I will try the Tailscale after I switch servers from my MBP to a Mac mini, that way I will have a static IP. Will try to port fwd both routers (my ISP and my Eero), else will go Tailscale.
Will let you know how it works.