One side of the exchange always needs to have a reachable port so by not having one you're limiting the peers you can seed to and also the peers you can download from.
exu
I'm pretty happy with XCP-ng with their XenOrchestra management interface. XenOrchestra has a free and enterprise version, but you can also compile it from source to get all the enterprise features. I'd recommend this script: https://github.com/ronivay/XenOrchestraInstallerUpdater
I'd say it's a slightly more advanced ESXi with vCenter and less confusing UI than Proxmox.
Graphene does not offer any support at all though once the manufacturer stops releasing new versions. With Lineage I've seen two or three more major Android versions ported than the manufacturer released.
I really like XCP-ng. Imo the interface is more understandable and polished than Proxmox. Similar to vSphere + vCenter, but more advanced options as well.
You'll want to use a quantised model on your GPU. You could also use the CPU and offload some parts to the GPU with llama.cpp (an option in oobabooga). Llama.cpp models are in the GGUF format.
ADDS is basically the only thing I might use Windows Server for.
Sadly Audible and removing DRM with ffmpeg.
If you do go down the VLAN route, make sure to define enforce the networks on the Proxmox and firewall side. If you set the VLAN ID on the client instead, an attacker could change it to a different network.
Not sure how exactly Proxmox works for this, but generally you'd distinguish between tagged and untagged ports.
You'd use untagged ports for client/vm access. Any packet gets the VLAN tag set to what you define.
A tagged port would be used to connect Proxmox to the router. This keeps the VLAN tags in packets intact for the routing you'll need to do.
Also not FOSS, but I'm using Summit.
It's the only client on Android I'm aware of that has mod-tools built in.
AACSv2, which is used to DRM UHD bluray disks has just been broken. Maybe we'll see a new generation of backup tools soon.
I previously used WikiJS, but since about a year ago I switched to Grav.
The really nice thing is not having an additional database anymore. It's really just markdown pages, config files and php plugins.
By default it looks like a blogging platform, but with the learn2 theme it also works pretty well as a documentation website. The official docs are written using that theme.
I wasn't completely happy with the defaults though so I did some modifications for my own wiki. Some limited knowledge in HTML, CSS is required and PHP or Javascript don't hurt either.
You can find the theme, plugins and pages in my repo as well if you'd want to use any of it.
For hard drives Toshiba, though SeaGate would be my second pick. Fuck WD.
On SSDs I go on Wikipedia and look at a list of flash + controller manufacturers and pick one of those. (Samsung, Kioxia (I think), Sandisk)