Thanks for the nice write-up, saving it in case I find myself behind CGNAT in the future.

I’m not sure I understand what you are trying to do, since you’re gonna have a vps, why not move your reverse proxy over to it and have that as the only entrypoint to your network using tailscale or wireguard for it to connect to your home services?

What does DEI stand for? Urbandictionary was completely unhelpful with it

Seems they’re running a podcast now:

https://youtu.be/xMTK3aaBOz4