This is the way I’d go if it were me. Debian minimal, add in unattended-upgrades + rkhunter + fail2ban + ufw to keep it locked down, and then set it up as a kiosk for whatever I needed (something like here: https://github.com/PhilGoud/xfce-kiosk )

Nice, I was unaware, thanks!

Been moving over to LibreWolf and I’m pretty happy with it so far. I added NoScript and CanvasBlocker extensions, along with my password manager, and I’m getting settled in with it now.

I’ve been mostly using Nginx Proxy Manager, but I recently set up Bunkerweb as a WAF for a couple of public services I’m hosting and I kind of like it. It does reverse proxy along with a bunch of other things (bad behavior blocking, geographic blocking, SSL cert handling, it does a lot).

Mentioning it because I didn’t see any other mention of it yet.

NPM is easy to use. Caddy sounds like something I’d like to try too now.

It’s buttons you click on, arranged in a grid. You can color and arrange them based on groupings. I know you can have some marked “bookmarked” and some that aren’t, and then you’ll only see the bookmarked tabs on your Dashboard’s main listing. I’m actually not sure if there are further ways to delve into grouping. I certainly never bothered. Basic, like I said, lol

I’m super basic when it comes to dashboard. Spinning up a Heimdall docker container is so insanely easy and it lets me make nice looking links to all my services. Of all the things I’ve spent energy to try and learn to be better at, my dashboard has never been one and maybe it’s time to revisit… But man, it’s just a really quick compose file and one command and it’s there.

https://docs.linuxserver.io/images/docker-heimdall/#usage

Edit your DNS servers in the wireguard client config file