diamond

If you use Caddy with ACME DNS, all of this can be automated.

If you also use Cloudflare, you can do that + traffic routing with cloudflared without any need for port forwarding .