To play off what others are saying i think a mini pc and a stand alone nas may be the better route for you. It may seem counter intuitive to break it out into two devices but doing so will allow room for growth. If you buy a creeper bare bones mini pc and put more of your budget towards a nas and storage you could expand the mini pc without messing with your nas. You could keep the pi in the mix for a backup if your main pc is down or offload some services to it to balance performance.

That goes hand in hand with a level of trust with some companies/people and everyone has different threat tolerances. It also highlights the mindset that you have no idea what the person on the other end of the message is doing with it. End to end encryption helps keep in line eavesdropping down but if the recipient of the message has a compromised device or are screenshoting everything and posting it on facebook it’s out of your control.

As someone else said, selfhosting is the only real way to overcome this problem. When it’s all on your hardware it matters a lot less if the messaged at are decrypted server side or not. Everyone has a different threat level and at some point you have to put trust in some companies but if beeper makes you uncomfortable then buy a cheap second hand mini pc and learn to self host the service.

Everyones process is a little different but that sounds unnecessarily complicated. See my other comment about the arrs through docker. You could probably do it all in a single compose file.

It gets even more automated/complex when you add in something like overseerr which pairs up with sonarr and radarr to read your library and allows your users to search for a title and request it if it’s not in your library. With the click of an approve button the automation will have their desired title on plex in a matter of minutes.

Headscale is a self hosted version of tailscale, if you’d like to keep it as an option

The arrs would be your best bet to reduce your input. If i’m not mistaken you can run them all through docker including a version of qbittorrentb that’s bound to a vpn and the only way it access the internet is through that vpn. Or you could split tunnel your vpn and bind your qbittorrent to it and bipass your jellyfin instance.

Whoogle. It’s treated me well enough so far.

https://www.reddit.com/r/ProtonVPN/comments/8ww4h2/protonvpn_and_tesonet/

Beating google while being local would be the dream, wouldn’t it? What you say tracks but i’m like you, i’ve not done anything remotely like it so it’s very possible we’re underestimate indeed.

Agreed there isn’t any beating google, but everyone operates on different threat models. A bit of inconvenience for a bit of privacy may be worth it for some and not for others. From what little i used of it when i was trying it that yes it had much room for improvement but it was still useable. Once they get predictive text enabled i think the a swipe feature will really shine. But then again that’s just my humble opinion

Ah, my apologies, i didn’t know it was only limited to english

FlorisBoard has swipe