I host synapse as docker container behind traefik and it works pretty well. I have two users on my instance, have setup the mautrix-whatsapp bridge and federate with the instance of a friend.
The setup was straight forward: Pointing the sub-domain via traefik to the service and in the homeserver.yml enable well-known which announce port https with port 443 instead of 8448.
I use immich and nextcloud for the clients (my wife and my parents know that I only take care about that data) and on the server side I use borgmatic which has a local repository on the second drive inside my nuc and a remote repository hosted by hetzner called “storage box” which supports borg native.
Yes the remote is out of my physical access, but borg is fully encrypted and for 4$/3.6€/month for 1TB I feel good.
Before I started with borg and hetzner I had a rsync based backup with an odroid hc1 hosted by my parents, but that doesn’t feel safe. Due to slow network by my parents I had to sync my local backup instead of a second backup from the real data and the monitoring was also very bad.
From my point of view: You have no backup, if it is not automated and you have no monitoring.
As recommended from others here the docker version with a compose file works great.
I had similar problems with nextcloud upgrades until I switched the channel from latest to stable. Stable is still version 31, but I haven’t found a user comfortable alternative which I can give my family without hearing their pain. For me *Dav is the best decision and Syncthing for files that should be offline available like keepass or something.
And if you are actually on latest/32 maybe it is an option to switch to a tagged 32 version until it becomes stable.
From my view a major update shouldn’t been done automatically.