I use traefik to proxy to containers, pihole to provide dns for "*.mydomain.com", and tailscale to avoid opening ports

The end result is a valid HTTPS experience inside the network and outside (as long as tailscale is active on whatever device I'm using). And if I decide to ditch tailscale it's just a matter of mapping ports 80 and 443.

https://github.com/mikew/homelab/tree/public/services/revers...

https://github.com/mikew/homelab/tree/public/services/dns

https://github.com/mikew/homelab/tree/public/services/tailsc...