I have something like this with tail scale. My homeserver has a tail scale docker as well as a docker tail scale. The docker tailscale advertises itself as an exit node. The tailscale docker is gluetunned to an extern wireguard server (your mullvad for example) Now I can connect to my home net with tailscale and toggle the exit node on and off. By adding a different tailscale container with a different wire guard exit you could just toggle the exit node like that.

Seeing as you are using mullvad you could also just pay the monthly sub to tailscale and they connect your tailnet directly to mullvad

I was in a similar boat. Wanted a simple static site generator with little to no config. I found https://github.com/rochacbruno/marmite and am happy with it

Can recommend Immich for the Photo gallery and sharing option.

Can recommend Navidrome for music.

I use it for my personal projects and its perfectly usuable. If you want people to contribute you’ll just have to do it the old fashioned email patch way. You can use RSA keys but it requires a little fiddling. I’ve used them but needed to massage something. Now I just use ed keys. The SSH ui is perfectly fine. Your repos are stored as bare repos on the server in the configured directory. So they are easily backed up as regular files. It also supporta LFS.

Let me knownif you have any other questions

Many excellent replies. Just want to add https://github.com/charmbracelet/soft-serve as an option

This is the correct answer

For something more than bare got and lower than forgejo I can recommend soft-serve

Thank you for everyone’s help and input. I have it working now, albeit not in the way I had hoped (not using docker containers for it) but it works. I followed https://thedevquill.substack.com/p/setting-up-a-tailscale-exit-node but instead of using the NordVPN image I used the plain Wireguard client image. In the wireguard compose I set network_mode: container:wireguard. Now when I connect tailscale over the exit node, traffic is going out over the wireguard IP

The issue is that the remote server (the one I want to use as the exit node) doesn’t have tailscale on it. Otherwise I’d be doing just that :D

Thank you for the detailed explanation. I will give this a shot.

Sorry to be unclear Yes I want to be able to access my home services from outside over wireguard, but connect directly into the home network. However once connected to the home network I want all traffic to be routed outside via the remote wireguard server.

Thanks, knowing the term will help search for information