Same, picked up an Asrock x300 and running a 4750g at 35w.

Perfect for anything the house needs, and use the gaming pc for testing and prototyping

https://www.backblaze.com/blog/the-3-2-1-backup-strategy/

https://www.proxmox.com/en/products/proxmox-backup-server/overview

Bypassing the GFW is illegal

Yes, I do know and realize that. Why it’s probably not a good idea to try connecting to your homelab lol

What you’re asking is illegal where you’re going

Best of luck to you

Cloudflare isn’t very self-host, unless you want/need to trust a third party I wouldn’t recommend this.

This might help

https://blog.pishop.co.za/using-a-raspberry-pi-as-a-bluetooth-speaker-with-pipewire/

Your response clearly states publicly accessible DNS. A CA does not require anything public for local SSL and can work in conjunction with whatever service they want for that which is public.

public domain for internal services

I guess they need a CA then

https://smallstep.com/docs/step-ca/

https://www.freecodecamp.org/news/docker-nginx-letsencrypt-easy-secure-reverse-proxy-40165ba3aee2/