There is also an aftermarket solution, if you are not on gos, three name is duress on droid.

If you still want the comfort to open your phone via biometrics plus disable biometrics in emergencies there is private lock (fdroid). It will engage when the phone is shaken, e.g. a thief grabs it from your hand while you are typing, or you shake so nobody can force you to open it by fingerprint. The device will be locked and biometrics disabled until you unlock it again. There is also a recently updated app on fdroid with the same features, but it was not as reliable for me so I went back to using private lock.

Openwrt generally works great on x64 PCs. Thiss machine will most likely be more beefy than your home router and could become your main firewall. It can handle adblocking and vpn client for all PCs on the network as well or whatever your need, as openwrt can do many nice things no commercial router can do out of the box. Install openwrt on your home router as well and use that as access point (connected via cable). You will improve your wifi signal as well. If your machine does not come with rj45 lan ports, install usb3 to rj45 adapters to the usb3.0 ports. They will give you the full 1000 mbit speeds.

You need to change the nginx config (for the website you will be hosting your services at. /etc/nginx/sites-available/yourdomain.com

You can reroute all http requests to https in that config.

Watch a video on how nginx works and how to set it up, and then look for example nginx configs for your services. It’s a pretty standard setting nowadays so the syntax should be easy to find.

I think nginx can be setup to work locally only, but do you even need it for that? It’s primary use is to proxy http requests to the different websites running on your server, enable https via letsencryt and so on, I think.

100% Opnsense. I used to run pfsense for a couple of years but there project was bought by a for profit. Enshitification ensued. They still released their code as per open source licence, but it was not up to closer inspection as it could no longer be used to built the distro from source. They banned perfectly fine hardware from using pfsense as it could not provide hardware acceleration for open-vpn (Aes-ni). The fork opnsense is to be preferred.

Sure you can play doom 1 and 2 campaigns in co-op. No need for modding. You don’t even need a network card. Just buy a cable to connect both serial-ports on the PCs.

That was my first co-op experience and it still one of the best I’ve ever had.

If you are looking for a future proof, snooping free and secure solution for home routers, there is most likely no way around installing open source firmware like openwrt. I would just pick a device with good openwrt support, some ubiquity models have that, if I remember correctly. But there are many alternatives by different manufacturers. I would just chose one with good hardware specs in your price range, install openwrt and call it a day.