If you don’t mind having email go through Gmail etc, then you might not want to full host, but just run a local IMAP server. There are some pop to SMTP solutions you can use to pull your emails (fetchmail.) you can then use your account as an outbound relay. Keep in mind you’ll only be able to set this up for a single account if you use something like Gmail.

If you buy a business product like workspace or m365, you should be able to setup relay/hybrid connectors for multiple accounts.

It depends where you want the complexity.

Since ssh is a layer4 tunnel if you don’t run a proxy on your home box, you’ll need a new network connection for each service, if you are fine with that, I would set it up only on the VPS. This means if the tunnel goes down, you should at least get 502 error rather than a timeout or connection refused.

Alternatively you could forward 80, 443 to a proxy service on the home server. That would require two ports for the ssh.

You can drop it to a single ssh connection by having a proxy on both and just have the VPS proxy Http and https to the same port on the home server.

It’s almost like trying to squish different security architectures on top of each other doesn’t work well. It’s a nice idea, but it was either not going to work smoothly or be a big security issue.

It’s not in the picture, but this is referring to the bedrock version. Officially “Minecraft” referrs to this edition.

It’s all allocated, but not all those allocations are for routing on the internet. Eg private ranges, localhost space, multicast, experimental ranges. Unfortunately you can’t repurpose those ranges as there is already kit out there that is hard coded to treat them a particular way.

I use it with WAC on my home server and it’s good enough for anything I need to do. Easy to create VMs using that UI, PS not even needed.

Last time I did this domain accounts needed to include their domain/upn to logon, so there won’t be any account confusion. However if they were accessing the nas from a domain joined machine, it would use Kerberos anyway so shouldn’t be getting prompted to logon. Obviously that is only for SMB shares, other connection types didn’t use Kerberos.

For real, at the minimum use a virtual machine.