Fuck Cloudflare. Hail Bunny CDN and Netbird.io for private networking instead of Tailscale/Headscale/Pangolin .

You can bake haproxy and acme.sh into a container yourself. Haproxy is hands down the best performing/least resource consuming RP. Dynamic management, like mimicing Traefiks service discovery, can be a bit tricky though. Yes, it doesn’t support ACME itself but once you get passed the “hello world” RP’ing and need something more advanced, like ACME DNS01, Haproxy with acme.sh is your buddy for life.