All those services use a protocol named WebFinger that allows for having the servers in different domains but showing the users as being in a main domain. For example, my self-hosted Synapse server is at matrix.domain.tld, but my users are all like [email protected].
Unfortunately I don't really know how to set it all up manually, I just let Yunohost take care of managing it.
You are able to host all these services and more on the same domain. I do a similar thing with different services at different subdomains. I don't believe the username@ portion can help point to different services, that syntax is usually associated with email addresses.
I think the best way to go about it would be having different subdomains such as lemmy.domain.tld, matrix.domain.tld, etc.
To accomplish that, I have a wildcard subdomain point to my server, my reverse proxy (Caddy) handles figuring out which subdomain maps to which service on top of handling TLS certificates for me.
All of my services are in containers, I use Docker usually via Docker Compose. That gives me one file to establish all of my services, update/start/stop/check logs with consistent command formats for all services, and keeps the data separate from the application. If I need to rebuild, put a backup of my data in the right spot and change names in filepaths as needed, run a backup of the Docker Compose file and I'm up and running again.
The only things I don't have in a container is Fail2Ban on my rented, public facing server to minimize noise of bots trying to login.
Regardless of configuration, you still need to access the instance from mastodon.mydomain.tld or lemmy.mydomain.tld, but you can configure the Mastodon to use @[email protected] as its identifier by setting WEB_DOMAIN to mydomain.tld.
No you can't.
One way or another your request from your browser that have to reach (let's say) mastodon will have to go through the web server then to the mastodon backend. Your request reaches domain.tld and your reverseproxy will send the traffic to the corresponding service... But you have 3 services answering to domain.tld.
You won't be able to get anywhere, or maybe to the first service where your reverse proxy matches but nowhere else. I don't even know if a reverse proxy will allow to start with that kind of configuration.
You'll have to use subdomains, you're not even (always) allowed to use subdirs (like domain.tld/lemmy) sometimes.