I run grapheneos since a couple of years and I love it.

Sounds like a good solution as well

I run nextcloud on my machine. If there’s a crack, there would be one in their hosted instance as well. There’s nothing really I can do about security of it.

Thanks!

I use nginxproxymanager, I’ll try to find something similar (I couldn’t find something directly)