Sounds like you are looking for Opentofu/Terraform. I use Opentofu to fastly create VMs on Proxmox with Cloud Init scripts. In scenario where one VM hosts one service I try to build IaC that way I can destroy VM and create a new one without loosing anything, data nor configuration.

It can be done using Forgejo Actions. I did something like that with Github Actions. I host static website on my Yunohost server using app named my_webapp and I wrote Github Action Workflow that deploys it into my_webapp directory

Yunohost has been recommended to me a couple of years ago and this is a software that brought me into #selfhosting.

Thanks to Yunohost’s application catalog, I got familiar with quite a few interesting applications, learnt about their capabilities, and I still use many of them today, such as Hedgedoc and Wallabag. In addition, Yunohost makes it easy to manage domains or reverse proxies. I currently work as SysOps/SysAdmin/DevOps and when I choose to deploy an application, I opt for something I have more control over, but without yunohost I would never have stepped into this career path. I continue to use yunohost on my main server, which is a bastion of stability for me, but I test new apps and host them on a separate server. In Yunohost, on the other hand, I install the Redirect application to conveniently have access to them outside my network.

Not exactly. Yunohost offers solution to host services openly to the internet thanks to simplified configuration of domains (and it even offers free domains) and reverse proxy. Also it has built in email server (not client, but the server). Apps are packaged in its own format and with unique configuration, it is not just some wrapper for Docker Conpose

I think you can go with Yunohost. It is easy to start selfhosting and exposing services to the web. I use it for more than a year, and it is super cool. Especially I love the fact, that it is easy for newcomers, but also it is opened for customisation for more pro users. Yunohost provides domain with ddns, Fail2Ban and tells which ports should be opened (80 and 443 is all you need, maybe another one for ssh). It also provides SSO for hiding services that do not use authentication.

Wallabag! I am using it for more than a year and it is great