GrapheneOS on Pixel 9 Pro XL. it’s a very refreshing experience having nearly no preinstalled apps, and having to install anything you want yourself, not the other way around. I don’t need Play Services/FCM notifications either, I use Molly to talk with people, a fork of Signal that allows for UnifiedPush support, which I self host ntfy for.

Immich full stop, like everyone else has said. self hostable so as much storage as you can buy (and maintain backups of!), AI so you can search your photos like “sunset on beach”, and just rock solid, despite it “”“technically”“” still in pre-release stage

if you know/use docker, the solution that has been the most straightforward for me is SWAG. the setup process is fairly easy when combined with registering your domain with Porkbun, as they allow free API access needed for obtaining top-level (example.com) as well as wildcard (*.example.com) SSL certificates.

along with that, exposing a new service is fairly easy with the plethora of already included nginx configs for services like Nextcloud, Syncthing, etc.

although definitely not as configurable, I like the “set it and forget it” idea of DockoVPN

Nearly all of them. Nextcloud, Jellyfin, Vaultwarden, Spacebar, and 2fAuth, all set behind an NGINX Reverse Proxy, SWAG. SWAG made it very easy to set up https and now I can throw anything behind a subfolder or subdomain.