I use a wireguard tunnel as a reverse proxy and it does ssl passthrough with sni. Termination happens on my local box and the reverse proxy host doesn’t do any certs.
I went with rsync.net, grabbed a promo at some point and have been getting 1.6TB for $10/mo. They support a wide range of protocols (sshfs, sftp, rsync, borg, synology, guides for freenas and truenas), snapshots, idle alerts, geo redundancy for a fee. Been very happy with it so far. Had to retrieve some files once and had no issue.
I couldn’t find a common compatible format for me and 15 friends :( I also got tired of getting 20 requests to download more movies and episodes every week.
I use haproxy just for simplicity, with the https fronted in tcp mode with a tcp request inspect delay and acls using req_ssl_sni allows switching between multiple backend based on hostname, though if you only had 1 backend server then it could just be a raw tcp proxy. I have my stuff split between 2 local boxes that are both connected to the reverse proxy using wg so this works well for me.