Work through them roughly in this order: pick a method (port forward, VPN or tunnel), confirm your connection can accept incoming traffic, fix any double NAT, then add a name and a certificate. On a .app name the certificate isn’t optional – browsers only ever connect over HTTPS.
Self‑hosting basics that apply to everything
Whatever you run at home, the same few questions decide how you reach it from outside. Start here if you are new to it, or come back when something doesn’t work and you need to know which layer is at fault.
