from Colin Percival empire we present "spiped":
https://github.com/Tarsnap/spiped
https://www.daemonology.net/blog/2012-08-30-protecting-sshd-using-spiped.html
https://www.daemonology.net/blog/2011-07-04-spiped-secure-pipe-daemon.html
yes, it's true and it's not black magic...if you understand the simple technology behind...and yes it's a magic bullet
enjoy
it is what you mean...no less no more...Caddy rocks...
If you're confident to expose a machine on a VPS and you can manage the implications then you can manage a machine in a DMZ of your NAT/Firewall home router.
If the server it's a bare metal UNIX than you're ok (i.e. *BSD || *Linux on a Raspberry Pi 4/5) , the basic install it's better than Fort Knox
Everything that you host in your house with spare parts and does not let you pay for a dedicated online VPS
the one you don't use it