Neat! I set up something very similar a few years ago (just with raw dnsmasq); fun to see someone else hit upon the same solution.[0] For anyone running a similar setup: if you want to keep everything as-is, but also expose a single service to the Internet, you can use Tails ale's "Funnel" feature.[1] I use it to self-host Plausible on my home server (i.e. to allow hits to my blog to be counted by my home server, even though that server isn't "generally" available on the Internet).
I like calling these "anachronyms," because they're sort of like anachronistic acronyms (yes, fine, this one's _technically_ an initialism). I wrote a blog post[0] about them.
Woah--I stumbled upon "Hypermedia Systems"[0] from the View Transitions essay linked on this release page. If, like me, you're sympathetic to the htmx philosophy, but not really an expert, it looks like a great read. (And it's beautifully presented, too.)
Seems it was discussed a few months ago[1]; I missed it then.
[0]: https://simpsonian.ca/blog/securing-home-network-dnsmasq-tai...
[1]: https://simpsonian.ca/blog/selfhosting-plausible/