Katrina

I have a set of shell / powershell scripts that I run post-install to configure everything. They are hosted on a local webserver, so it is just a one-line command to run the appropriate one.

PiHole can be configured to use DoH, as can OpnSense and presumably other local DNS and router servers.

I’m not sure you could even run pihole on 512MB RAM.

And the biggest disadvantage of IPv6 is that each of your internal devices has its own address and can be directly accessible from outside. So you need to completely rethink how you do security.

I have about 25 letsencrypt certificates on the same domain, so that is definitely not an issue.

Just bear in mind that microsoft.com is hosted on Linux. If Microsoft don’t host their own website on IIS, why would anyone else?

My NAS is a FreeBSD virtual machine. The drives are passed through directly to the Virtual Machine, so it is possible to take the drives out, and attach them to another virtual machine or bare metal computer running FreeBSD or TrueNAS and read them.

Lets encrypt certificates are trusted by everything I’ve tried.