I use it with a rule package that has a variety of Vale styles for AI writing tells (github.com/tbhb/vale-ai-tells). Typically I have it set up in a project and then gate the agent with post tool use hooks and pre-commit hooks. It's far from perfect but it does help eliminate a lot of the common tells.
These are exactly the challenges and toil I ran into over time with my self-hosted/homelab setup. I use regular domains now as well with DNS challenges for Let's Encrypt. I've been experimenting lately with CloudFlare Tunnel + Zero Trust Access as well for exposing only the endpoints I need from an application for local development like webhooks, with the rest of the site locked behind Access.
I used to run wildcard cert with DNS challenge from LE with CloudFlare Tunnel to expose internal server to interwebs.
I have since then switched to ubiquiti products, and now I just run wireguard server for my road-warrior devices. Would use CloudFlare Tunnel if I ever need to expose anything publically.