TheHolm

Are you running it natively as "jail" ?

Nothing can beat bhyve for PFSence.

I do not understand why everyone calling hosting email difficult? IT is like 5 RFC you need to read and implement. Sofware wise you will need mail agent, something for DKIM ( if it not build in in agent), "local delivery agent" ( probably presenting it as IMAP) + mail reader of your choice. Nothing too complex

Do not try to host outbound mail on residential IP blocks, delivery will be really bad. Cheap VPS is same story. You best bet is VPS from some not well know provider, they may be avoid to be in blacklist in M$ and Google. Inbound mail is fine anywhere as so long as you can have port 25 open. DDNS works too.

Specks lookg good, Intel NIC, semi decent CPU. I would say it is even overspec for a router.

It is an option. But used from Ali? I'm not sure that I would trust them with my data.

Thank you. Intel now offer ECC on top processors like i7 and i9. It is a news development. Now biggest problem is to find motherboard supporting ECC.

Try other container technologies lie LXC or go right side and play with FreeBSD jails. Quality of dockers you can find around is horrendous, giving that Docker itself build for convenience not security. It is not something I will trust.

Ant then we can go to UV ,XRays and Gamma to get an unlimited bandwidth across the universe.

HIkvision is great. Good value for money. Just do not use the app to configure them, use web gui. And yes, they need to be isolated from rest of network and the internet ( as pretty much any cameras).

Just get VPS and use it to bounce traffic between nodes.