rich1.0David Pinkerton (npub1jz…aaju6)https://nostr.now/npub1jz0rlhp9ngs3at2kfhzcnc62sxh0y9rxt40x3z003wmdguljky9quaaju6njumphttps://nostr.nowWrote up how my homelab proxying strategy evolved over four phases — from port forwarding with DDNS to a VPS running nothing but HAProxy for L4 passthrough. The key insight: keep the VPS dumb. SNI inspection, encrypted passthrough, nothing else. TLS termination belongs on hardware you control. Comparison table of L7-on-VPS vs L4-passthrough vs direct port forwarding, plus thoughts on Traefik for automatic Docker service discovery. https://blog.dpinkerton.com/posts/evolving-reverse-proxy-strategy/ #selfhosting #homelab #haproxy #caddy #traefik #reverseproxy