It's pretty easy to setup using docker, you do need to know that ofcourse and how to setup dns and stuff.

I have it firewalled so my vault is not accessible from the internet, only from home or vpn to home.

Technically yes if my vault gets compromised I would be fucked. I have it firewalled tho and only accessible from home (or VPN to home). So should be pretty secure. I used google authenticator but found it a major pita (can't even search entries on Android, wtf?). If they make this more user friendly I'll gladly switch back to a seperate OTP store.

Recently started using Bitwarden and it works really well. You can even ditch authenticator because it has OTP built in too.

I selfhost it though because I trust nobody with this type of sensitive data, encrypted or not.

Looks like the explosion causes the buk missile to launch into the field? 10/10

I'm in a love hate relationship with vscode. Used Neovim for a year or two but got fed up of debugging plugin problems after updates. Currently giving vscode a go again but it somehow feels dirty lol. It seems to get better though and it is very popular. Like others have said, if you want something really polished Jetbrains is very good.