Hahaha. I see you’re being down arrowed a bit… But I was thinking the same thing.

Reason I was thinking nixos was because op was talking about " flipping switches" they couldn’t flip back. Nixos has that sorted out.

Plus… It sounds like op isn’t afraid of trying new and possibly difficult things on a new server they’ve acquired

The truth is that proxmox is likely the best option here. But nixos could be a fun ( type2 fun) challenge if they’re into that kind of thing

To add to the idea of using tailscale. I’ve been using tsdproxy for a while now and it’s outrageously easy to set up.

The reason I’ve gone this route is that I feel like it gives me a bit more control over who is in my network and what they can get to.

Each service gets a funny name address and I get to share that specific service with other people who also have tailscale. Then if they get on my nerves or something, I can stop sharing that specific service and they can figure it out on their own.