Leak the scripts?

Anyone who says yes is either a professional in a field already requiring it (is aware of how to do it and what it means), retired (has unlimited time to tinker), or is Edward Snowden. For the average person, you don’t need to encrypt your disks.

If you want an OoTB solution you can get a Cloud Gateway from Ubiquiti (the ultra is like $200 I think) and use its vlan feature though you may need another switch.

Otherwise, if you’ve got unlimited time to tinker, proxmox or pfsense are ok options.

I personally run the UDM SE and I highly recommend this approach if you don’t want to roll it yourself.

You definitely want to go the truenas route for a media server.

For a newbie, cloudflare is fine. Relax.

this. Op, look for a used Synology. It Just Works ™️

Convenience is key.