Your home server should be beefy enough to host and support all your services. Once you figure that out, the added overhead to manage the NAT, the tunnels and the reverse-proxy will be negligible.

You want something low-power tough and you might want something battery-protected to prevent strain on hard drives due to loss of power. You might also want something not too loud unless you plan to place everything in a secluded place (but watch out for heat buildup!)

My choice is an oldish powerful workstation-type laptop:

• it has at least one wired Ethernet plug (the second one can be a USB-C gigabit Ethernet adapter)
• it has keyboard and monitor, for those local access needs, without requiring a dedicated monitor wasting space
• doesn't reboot when there is a power loss at home
• Usually laptops are both less power-hungry and less noisy.

Of course, the drawback is that laptops have limited storage space. For this reason, i added a RAID JBOD solution connected via USB-3/USB-C with a conspicuously sized SSDs RAID array, and i plugged it to a cheapo low-wattage battery backup to keep the RAID array running in case of power-loss.

Are power loss frequent? No they aren't, but i do not want to run risks with my data.

The remote server can be a virtual server or a physical one, doesn't matter, it will run nothing except tunnels back to the internal server.

hardwarw!