Comment by DaSHacka
6 hours ago
If it's only your own clients connecting to it, have you looked into Tailscale? Even as a selfhost-all-the-things type of guy, I've been convinced. This is exactly why I started experimenting with it too, due to Android now allowing multiple VPNs at the same time. It replaced my previous setup of hosting parts of my homelab technically exposed to the internet, which were only used by my phone since it already had an always-active mullvad.
Er? Android supports multiple VPNs at the same time on the same user profile? Since when exactly?
Whoops, unfortunate typo, meant to type "not". My issue was I already used the Mullvad VPN client, so I couldn't double-up with a personal wireguard VPN client for my homelab. Tailscale "solves" this by supporting mullvad exit nodes natively in the service via a direct partnership, so you can have "one" VPN with multiple nodes accessible.
I tried it once but had some issues where it was hard to get the Tailscale DNS to play nicely with my container setup. It's been a couple of years so I may be misremembering, but I want to say the issue was that it only would resolve names to the IP of the host, not the containers themselves. That could've changed by now, of course.