If all traffic is going through your homelab you can make the vpn clients use a vpn specific DNS server or the one suggested with resolving per origin, you then make the external names to your services to resolve to the servsrs’ internal IP addresses, avoiding going out. Another way is to add rules to your gateway to redirect internal traffic going to your external IP addresses to DNAT to the internal addresses but in order for that to work you need to masquerade them which means server logs will have gateway’s IP.

I use freshrss and fluent reader as android client app

“Mastadon”

I believe the same. Want it or not, Trump has the charisma that nobody else in the party does. And the luck. My only hope to stop the madness was to have Trump losing the election then dropping dead by natural causes after. That’d be safest way to take all his followers out of the spell. I really don’t see any other way for his cult to end. Then the right wing extremists go back to hate in their closets and, if democrats are smart, keep having more moderate candidates like Biden and reign the extreme left as well.