lemming741

opnsense is the way. Dedicated mini pc while you figure it all out. Eventually you can virtualize it, but run bare metal to learn.
I’m very happy with my Omada APs and their roaming. I have one in my garden shed in mesh mode, and it gives me a LAN port for a poe switch and cameras.
Any roaming capable AP is going to need a controller, so think about where that VM is going to live.

I used to have to run “portable” apps that didn’t require any permissions to install or run.

https://portableapps.com/about

We got endpoint protection now and I can run way more stuff without jumping through hoops.

It’s worse than that- the Toyota distributors in my area have a regional monopoly and add a non-negotiable $2000 worth of useless crap to every car for 500 miles.

$129 screen protector for the radio $80 for a bag of red USB cables $700 for “enhanced warranty protection” $1200 for nano-ceramic-ionic-polymeric paint and underbody coating

For every one of us pulling telemetry fuses and keeping old cars on the road, there are two dozen fuckwits buying refrigerators with billboards on them.

I have a $5/mo VPS that my domain points to. It runs caddy reverse proxy to my homelab over wireguard. If my home IP changes, the wireguard ‘server’ has the the IP of the VPS wg ‘client’ configured as the Endpoint, with no endpoint set on the VPS. It will switch over pretty quick.

https://anders94.medium.com/wireguard-config-for-the-initiated-2b1cc5f2b1ee

https://forum.netgate.com/topic/188527/roaming-peer-fails