I have a setup where Wireguard docker container that is connected to my local network and if I use any other container to get local access I use `network_mode: service:wireguard-container` for that remote container have the same access as my VPN container.
This has pros and cons. Major pro that the host machine has no access to my network, so it works as regular server. Cons are that if I want to expose say a web panel for one of my local services I have to apply proxy settings to the VPN container and if you use a multiple copies of the same container that does not allow to change default port… you get collisions.
My age.
I remember about a decade ago when wiping your phone daily to install the new ROM was not that much big deal. I think a lot of stuff was unstable more unstable than it is now but we relied less on it. Now. I can not imagine loosing some data or some things that are important to me.
Also regulation. I worked in ecosystem that if it was a cloud service you would have to sooo much extra time on paperwork for only a chance of not getting denied. There was also some other legislation out right eliminated a number of services. Local became only real option.