Yeah I use ansible (in pull mode) for my home automation for just such a purpose. I have the router open up port 443 to my one box, then have haproxy read the h

Yeah I use ansible (in pull mode) for my home automation for just such a purpose. I have the router open up port 443 to my one box, then have haproxy read the header for the incoming traffic and route it to the backend on the box whether a docker container or a local service. Foundry VTT, jellyfin, etc. All from Ansible, all to a private github that I just SSH into the machine long enough to run ansible pull. That way, when I run into errors, it's just rinse and repeat to iterate my ansible playbook code until it is perfectly fit for this exact situation. Is my code maintainable and enterprisey like my work ansible? NOPE. But it's okay, it's my private code that nobody but me uses. I even do direct commits on master because I can, it's my tiny naughty guilty pleasure.