I consider myself a novice but this is how I do it too (ngnx reverse proxy handling SSL in conjunction with Duckdns domain. Wireguard for remote access to everything else). Both Nginx & duckdns are fairly straightforward to set up through Docker/Portainer.
Should the need arise I’ll look at Tailscale.
I dont use HA yet, it’s something I’d like to get into if I can figure out VLAN in order to keep IoT stuff away from the rest of the network.
Anyone for a quick game of ET?!