You may want to consider dockerizing your services just for maintainability and isolation from your host. I recommend something like Nginx Proxy Manager to serve as the “main entrance” for your docker network and to handle Let’s Encrypt for you.

Yes and no. It’s great for hiding your IP and preventing DDOS attacks, but it does require you to use their certs, which means they technically have access to your data. Cloudflare is pretty trustworthy, but the risk is still there.

Sigh, all I want is some decent privacy-centric cloud services like Proton. Bonus points if they’re self-hostable. I am currently paying Proton for a premium plan, but I would have gladly paid Mozilla instead for similar services. They keep trying to monetize the wrong things and doing a poor job at it at the same time. None of their VPN and email aliasing stuff are competitively priced or featureful.