You should check out comos cloud features and maybe copy some ;)

[Kurma]

So I really like HexOs, but I think a reverse proxy is essential for hosting apps like immich. I came across cosmos cloud some time ago and its feature catalouge the opposite of HexOs v1 so far. In that it does not have solid storage system or VM management. But does have really great proxy support with included certificate generation, fail-2-ban, geo-blocking. In addition one can handle secuirty for each  app as only through vpn, only with cosmos account (or only cosmos admin account), or no protection (although it also has a built in OICD manager).

For the short term I will probably host cosmos cloud on hex os to get these features. But I really think that this is at least worth looking into for the HexOs team as design and usablity of the cosmos cloud proxy ui is very mature.