Here are my notes on an SNI-based approach (with the goal of being to be able to host several machines being a single IP, or expose a YunoHost that cannot be easily exposed through traditional means using another external YunoHost)
The remaining part of the PR is kind of tricky because implementing fail2ban on the proxied server aint trivial in this approach, because all traffic (in terms of IP layer, the one on which fail2ban/iptables act) appears as coming from the reverse proxy so eh
