Kann Replit weg?

Build me a personal cloud dev environment to replace Replit, on a VPS I already have.
Requirements:

- code-server (VS Code in the browser) behind Caddy with HTTPS and basic auth, installed
  by one setup script. This is assembly of good parts, not a new IDE.
- A `dev new <name> --template node|python|static` CLI that copies from a templates/
  folder (each with .gitignore, README stub, and a run script) into ~/projects/<name>
  and runs git init.
- Each project gets a port in projects.json; Caddy routes <name>.dev.mydomain.com to it,
  so anything I run is instantly viewable at a URL.
- `dev deploy <name>` commits and restarts the project's systemd user service; `dev logs
  <name>` tails it.
- Per-project secrets in <project>/.env, never committed; the template .gitignore
  enforces it.
- Nightly tarball of ~/projects to a backups/ folder, keep 7.
- Reachable only over HTTPS with auth (bind to a VPN interface instead if one exists);
  no telemetry.
- Out of scope: multiplayer editing, hosted AI agents, and per-project containers. One
  VPS, one user, my own projects.
- README: the wildcard DNS record, Caddy config, and code-server auth setup.