I would suggest not separating the storage from the server that far. It would probably be wiser to run the app with less latency to the storage and accept more latency on the web frontend. In short: use your VPS as a gateway only and put the actual host for the respective app into your home behind a VPN.
The daemon script is simpler, true. but usually you can just point your router at some dyndns URL and you could put an internal IP for that.
I think using the cloudflare API is the way to go. You could probably set up an internal service that translates your home router’s dyndns request to a cloudflare API call.
Hilf einem ungebildeten Lemming auf die Sprünge und sag mir wessen Flagge das ist
Wobei sind die alle am Wochenende dabei? Der AfD ultra nuschelt mir zu viel
Out of curiosity: why are you putting vaultwarden behind a cloudflare tunnel?
Lemmynsfw uses a custom version that that removes the blur for nsfw images but that’s it I think.