sandstorm https://sandstorm.io/ 's dream is to make this as easy as installing a phone app. It's still rough around the edges but I think the model is completely right and the security it offers is excellent.

Nextcloud AIO has been great so far in my experience. Master container manages of sub containers. Borg backups included. Easy certs. Impressed with what they’ve done on that offering.