like dvdkon says, only the VPS has a static public address, and my homelab reaches out to keep the tunnel alive. Tehcnically my homelab is also on a static pub

like dvdkon says, only the VPS has a static public address, and my homelab reaches out to keep the tunnel alive. Tehcnically my homelab is also on a static public IP as well--this was more an exercise in "could I do this" than "actually necessary," but it's still cool as hell and I'm very happy. About the only hangup was I had to configure Wireguard to keep the tunnel alive, otherwise sometimes the VPS would receive incoming traffic and if my lab hadn't reached out in a while (which, why would it?) the tunnel would be down, and the proxy connection would die. Thankfully that's built-in functionality.