Same, picked up an Asrock x300 and running a 4750g at 35w.

Perfect for anything the house needs, and use the gaming pc for testing and prototyping

https://www.backblaze.com/blog/the-3-2-1-backup-strategy/

https://www.proxmox.com/en/products/proxmox-backup-server/overview

Bypassing the GFW is illegal

Yes, I do know and realize that. Why it’s probably not a good idea to try connecting to your homelab lol

What you’re asking is illegal where you’re going

Best of luck to you

Cloudflare isn’t very self-host, unless you want/need to trust a third party I wouldn’t recommend this.

This might help

https://blog.pishop.co.za/using-a-raspberry-pi-as-a-bluetooth-speaker-with-pipewire/

Your response clearly states publicly accessible DNS. A CA does not require anything public for local SSL and can work in conjunction with whatever service they want for that which is public.

public domain for internal services

I guess they need a CA then

https://smallstep.com/docs/step-ca/

https://www.freecodecamp.org/news/docker-nginx-letsencrypt-easy-secure-reverse-proxy-40165ba3aee2/

Raspberry PI

I have mine setup on a Supermicro itx-based machine with an Intel n3710 and 8G of RAM. It has four Intel-based ports but you can easily get away with two.

I used to run a Zotac ci323 with dual Realtek nics. Works fine for 300M up/down.

You’ll want two ports, one for WAN one for LAN and most nics will support VLANs if you need more than that. Any VPN or encryption will increase your cpu requirements. If your needs are low a cheap dual-nic Nuc like device works great.

depending on your use case these are cheap and cheerful.

https://www.newegg.com/sapphire-radeon-rx-6400-11315-01-20g/p/N82E16814202416