@infogulch Thank you that was insightful.
Outbound is answered via that post.
For inbound, here's what I'm thinking now :
- Setup private wireguard connection between DO and my home server
- Turn off Inbound email on DO Cloudron.
- Redirect inbound ports like TCP/25 via iptables on DO to home server via wireguard