Etwa sowas: https://www.marcophono.com/Gott.html? Klingt genau danach, hab ich auch schon erlebt. Gibt auf der Seite auch etliche andere “Anrufer”, wie seriös das ganze ist weiß ich auch nicht, würde da definitiv niemals eine Telefonnummer angeben…

I thought about something like that as well, but never tried it out (yet). Do you use WireGuard tunnels for that? Or something else?

Ideally I’d not expose most of the services to the public internet at all, since only me and some relatives need access to most of them. I have briefly looked into Tailscale or similar services for that, but again, haven’t tried that out yet, as that would (presumably) require changing quite a few things on both the server(s) and all of the clients…

After all, I’m just cosplaying as a sysadmin for the most part, so what do I know ;)

I do use one domain with several subdomains (or simply a wildcard), that’s what I meant by the CNAME record(s). But I see that wasn’t completely clear from the post.

The setup time is not really a factor, more just the overhead of one tunnel and one Traefik instance vs multiple tunnels without Traefik. I might just do some basic “benchmarking” if you can call it that to see the CPU and (more realistically) memory impact.

I’ve been using a Lenovo Yoga Pro 9i (or Slim Pro 9i if you’re in the US) for around half a year now and have been loving it so far. 14" MiniLED screen, 100% DCI-P3, can get really bright, has a touch screen (if that’s something you like) and a 165 Hz refresh rate. Can’t speak for the color accuracy though.

I got the i9 variant with 32GB RAM and an RTX 4060 GPU during a “Mega Power” sale and with an additional 10% off as a Student for just over 2000€, but even the normal price is “only” (compared to your MacBooks and XPSs) around 2500€ iirc.

RAM is sadly soldered onto the motherboard but at least you get 6400MHz for it. Storage is upgradeable.

Connectivity is great (2x USB-C with PD3.1 for 140W charging, one also supporting Thunderbolt 4, HDMI, full-size SD Card reader, 2x USB-A…)