I am looking for build servers, continuous integration of automation servers that can have clients (workers) that are behind NAT and that require non-root access on the clients.
This means that the worked is the one connecting to the server and asking for new jobs and not the opposite.
I am aware that it should be possible to setup VPNs or reverse ssh solutions but this is outside the scope of this question. I'm just looking for simple setups.