tinyhome VS Nginx Proxy Manager

That dashboard is a static site generated by a tinyhome script that I forked and tweaked to add a few minor features, then served via lighttp in a docker container. Pretty simple to update, just edit the config.csv and have the tinyhome script output replace the previous dashboard page. It's lightning-fast on my Raspberry Pi. my tinyhome changes

I now run web servers in Docker using the NGINX Proxy Manager (also in a container) as the front end and just use a cheap domain name host (was using a DDNS provider for domain names but went to a static IP last year). Many many sites offer free domain names (normally as a 'third level' or subdomain of their name e.g. yoursite.dnsprovidersname.com etc)

Moved from https://nginxproxymanager.com/ to https://github.com/traefik/traefik

As far as I was following the development of v3, they have changed the database in NPM v3, so I don't think you could easily port your config. And according to the Github page, v3 is still in development, so v 2.9.19 is still latest official version.

There was a discussion, https://github.com/NginxProxyManager/nginx-proxy-manager/discussions/1812 , where docker container where analyzer by Trivy (a securitu scanner) https://github.com/aquasecurity/trivy and lot of library where old and exploitable.

Indeed. This and this threads might help. Nginx Proxy Manager is another solution to consider.

To expose Nexcloud to the Intenet you would also need to deploy a reverse proxy in a container (for example Nginx Proxy Manager). If you don't need Nextcloud to be publicly available, you can deploy a VPN server (Wireguard) to securely access your local network from anywhere.

And also add your duckdns domain under the site_name option. An easier method if you're set on going the Docker route would be to use nginx proxy manager as it can do this for you as well as grab an SSL cert.

Nginx Proxy Manager. It's a Docker container of Nginx with a GUI that makes attaching automatically renewing SSL certs from Let's Encrypt incredibly easy (literally tick a box). It's how I have Calibre Web (and other things) accessible over HTTPS.