Vautlwarden as a service is great and since it’s GPLv3 licensed there’s no way that can be shut down. But the client is another matter and maybe that doesn’t stay open for using it with Vaultwarden forever https://www.osnews.com/story/145029/get-your-passwords-out-of-bitwarden-while-you-still-can/

Joker.com are cheap and they work. Not the most sexy UI but it works just fine. Personally I have about 25 domains with them. I use (and can recommend) Bunny.net for DNS and CDN and Hetzner for compute and storage.

Fuck Cloudflare. Hail Bunny CDN and Netbird.io for private networking instead of Tailscale/Headscale/Pangolin .

You can bake haproxy and acme.sh into a container yourself. Haproxy is hands down the best performing/least resource consuming RP. Dynamic management, like mimicing Traefiks service discovery, can be a bit tricky though. Yes, it doesn’t support ACME itself but once you get passed the “hello world” RP’ing and need something more advanced, like ACME DNS01, Haproxy with acme.sh is your buddy for life.