Two patterns cover almost everything here. Apps that other people or devices need to reach – Home Assistant, Jellyfin, Nextcloud, a Synology NAS – go behind a reverse proxy with HTTPS on port 443. Administrative tools – Proxmox, Pi‑hole’s admin page, SSH – stay private and are reached over a WireGuard VPN. Plex is the exception: it has its own relay and registration service, so its guide is mostly about getting that to work.
Every guide starts with the version we checked against, gives the exact menu names, sets up dynamic DNS for a yourname.uk.app name, and finishes with checks you can run from outside using the free port checker and SSL checker.