open ports

How can I securely expose self-hosted services through Caddy?

I run a remote home server with Proxmox. It has Tailscale for emergency access and a VM running Docker, where I host services such as Immich and Vaultwarden.…