Zarlin

Take a look at Bunny ( https://bunny.net/dns/ ), they’re based in Europe with worldwide coverage, and have a lot of other useful services as well.

And it’s fixed :)

I think I can create a CNAME record for *.media to point to the Tailscale address of the reverse proxy

This approach, but if you setup your server to advertise subnets you can use your local IP range instead of tailscale’s. Port numbers for individual services would be handled by your reverse proxy, you can setup a subdomain route for each service.

Instead of having to keep track of bookmarks you can use something like homepage on the root of your domain, as a dashboard to navigate to all other services.

My setup just has the local IP (of the reverse proxy) in the domain’s DNS records, and I have Tailscale on my home server setup to advertise subnet routes, so I can use the same local IP when at home or remote via Tailscale. No need to use your public IP or open ports or anything.

• Tailscale for external access, this is extremely convenient.
• Namesilo for domain (cheap but otherwise not really recommended)
• Bunny DNS (because NPM’s certbot doesn’t support Namesilo). Still looking at their other services, overall it seems nice.

Still looking at an external backup solution like Backblaze or Hetzner

You are roughly describing how Tailscale functions, give it a look

My interpretation of the emojis:

• Colorwheel + Yoga = Convertible laptop with pen/drawing support
• Lighting = Fast
• Controller/Cheetos = Suitable for gaming

Sounds like a best of all worlds, I’m curious :)

For the CPU: I have a AMD Ryzen 5 8600G in my TrueNAS Scale box, I use the integrated graphics for hardware transcoding in Jellyfin. If you don’t need transcoding it’s probably overkill.

For TrueNAS you’ll also want a lot of RAM, as ZFS (the filesystem) gets faster with more ram by using it as a cache. My box has 32 GB, but 16 GB should also work, especially if you’re going with SSD storage.

And don’t go cheap on the power supply, get an efficient one from a good brand (I prefer BeQuiet).