1. Cockpit with LXC
2. LXC which has portainer and has all the network stuff like cloudflare tunnel and nginx(for local toplevel domains), cloudflared for zero trust and exposing services publicly.
3. Adgaurd as LXC
4. Jellyfin as lxc
5. I have an LXC with portainer which has all the other apps...