This has been my journey.

I started with pure docker and hostpath on an Ubuntu server. This worked well for me for many years and is good for most people.

Later I really wanted to learn k8s so I built a 3 node cluster with NSF managed PVC for storage, this was fantastic for learning. I enjoyed this for 3 plus years. This is all on top of proxmox and zfs

About 8 months ago I decided I’m done with my k8s learning and I wanted more simplicity in my life. I created a lxc docker and slowly migrated all my workloads back to docker and hostpath, this time backed by my mirrored zfs files system.

I guess my point is what are you hoping to get out of your journey and then tailor your solution to that.

Also I do recommend using proxmox and zfs.

Have you looked into netbird? I have been thinking of setting that up over tailscale

I did a ninja edit about ports, but in your labels I only see web as an entrypoint

Edit, nm I see it not used to using labels for configuration it seems

Your entry point says, web should you not also have web-secure as well. I’m in my phone to forgive me if I missed some details

Edit: Not familiar with pod man, but are you should the port for the service isn’t 80 and not 8081 since it should be routing inside of podman?

Isn’t that what a TPM could be used for?

Tailscale/headscale are always recommended and they are good options but I want to recommend netbird as an alternative. This is what I have currently setup and it’s fantastic.