Is this really how self-hosting front ends works going between LAN and VPN connection?

It is not 100% guaranteed that your Home IP never leaks, but for an average threat model it should be fine. Android connectivity checks are one of the few examples I can think of right now, that could be bypassing the vpn.