Thanks, I like it. The downside is that the VPS can see the content of my services, so it’s no good if you don’t trust the VPS provider, or if the content is too sensitive to allow that. I think it’s a good trade-off for my usage though. Performs well. One of the services I proxy is a rpi serving images downloaded from weather satellites. Connecting directly to the pi is super slow, but the proxy caching makes it 100% faster.

I’ve noticed that more and more, interesting new projects have nix, appimg, pkg, and docker releases. So on Debian, I need to rely on non-native packages or compiling more frequently than before. Not a big issue, but it’s a new awkwardness I wasn’t used to.

The VPS is a $2 instance and very under powered, however it has a dedicated static IP and some Ddos protection. The basement computer is powerfully and capable of providing various services, but I don’t want any trouble with my home IP address. Tailscale let’s the VPS see the home computer securely.

I use both. Caddy on a VPS that reaches into my Tailscale network and proxies services hosted on a computer in my basement.