Selfhosted

The very premise of Gemini FastAPI seems flawed to me, if it's trying to create a wrapper when Google clearly does not want that to exist. The challenges that you observed, such as the brittleness of IP allowlists, would suggest to me that the overall endeavor is going to be brittle, by Google's design.

I would indeed not recommend deploying the Gemini FastAPI project, it doesn't work very well. The authors were ambitious and decided to reverse engineer it. That's efficient and great, but it's also hard to get it working and as you guessed, it is brittle. What they should be doing in my opinion is just run an headless browser and either proxy its traffic or install an extension inside to send messages in the real website and record its responses.

However, I have plenty of other containers that also benefit having an outbound firewall, like Immich for instance, which only needs access to the public tiles server for the map.