I used to simply use the 'latest' version tag, but that occasionally caused problems with breaking changes in major updates.
I'm currently using podman-compose and I manually update the release tags periodically, but the number of containers keeps increasing, so I'm not very happy with this solution. I do have a simple script which queries the Docker Hub API for tags, which makes it slightly easier to find out whether there are updates.
I imagine a solution with a nice UI for seeing if updates are available and possibly applying them to the relevant compose files. Does anything like this exist or is there a better solution?
You could maybe rent a cheap VPS and use that as a reverse proxy. Using Tailscale to create a VPN tunnel so you don't need port forwarding