I don't know there are any limits to hardlinks other than that the source and destination needs to be on the same drive.This might help
Delphiantares
If you get a reverse proxy setup all you need is port 80 and 443 and configure it it'll expose the services that you want to be exposed through the subdomain Personally I've got Traefik service sitting on my media server and anything I want to expose goes through it .it has the details for the connection to cloudflare and so long as I direct it properly both on the container side and Traefik it'll run as expected. The idea is if you go to say jellyfin.example.com cloudflare will direct that at at your reverse proxy(nginx in this case) which then redirects to the right machine/container because you entered from "jellyfin" .
The VPN gluten it is another container that will have the login details to your provider .
I'm still working my way through the self hosted rabbit hole myself, however I used a combination of Google and this sitehttps://www.smarthomebeginner.com/traefik-docker-compose-guide-2022/ The entire site not just the specific article linked . As well as https://trash-guides.info/
Or dispute it . This is how it's done almost everywhere else but the tax lobby have a best interest in this not working this way.
Or....you know bring back home ec classes that teach kids how to survive in the world instead of assuming parents will be able to do it
Aim wants a word.
If that's the case then a reformat into something that will support it is simple enough