Beyond the Tunnel: Adding HAProxy, ACME, and VLAN Isolation Behind My OPNsense WireGuard Setup
The WireGuard tunnel got traffic into my homelab. HAProxy, ACME, and a strict VLAN policy decide what happens next. A follow-up on how I expose services safely — and what I deliberately keep hidden.

