may your pillow be warm on both sides
maybe you issued one certificate with multiple domains, mixing internet facing ones with purely internal. It is very easy to discover hidden subdomains inspecting the certificate you get from a public service
I use artix for my work and personal servers. There are a few kvm hosts and several virtual machines with internet facing services such as dns, web, mail, wireguard. On the way to be fully gitopsed with ansible. Sometimes I borrow specific packages from arch repos but almost everything can be made with artix alone. The only notable issue I had was with cloud-init which I replaced with more complex playbooks and bash scripts. Ama
its not a special setup. you can log in to jellyfin using a web browser in your laptop and connect the hdmi to the tv. then this device appears in the cast menu, so you can choose movies or shows in your phone (jellyfin app) and cast them to the laptop
I run postfix and dovecot at a server at home with no issues for a few years now.
I was going to say highway star but I am changing my mind for this now
you can use iptables tarpit target. it works on the transport layer so it should work with any application layer protocol.