Be extremely careful. Plenty of people are really smart and malicious, so you need to isolate it from everything on your network. You’re giving random people remote code execution on your local network, which is like the worst case scenario for security.
Behavior-based antivirus is extremely difficult, failure-prone, and almost entirely unnecessary because of how secure Linux is, so they don’t exist to my knowledge. Signature-based antivirus is basically useless because any security holes exploited by a virus are patched upstream rather than waiting for an antivirus to block it. ClamAV focuses on Windows viruses, not Linux ones, so it can be a signature-based antivirus, but not many people run an email server accessed by Windows devices or other similar services that require ClamAV, so not many people use it, and nobody made any alternatives.
If you’re worried about security, focus on hardening and updates, not antiviruses.
A .ovh domain is more like $3 a year. That’s what I’m using.
This may not fit your needs, but matrix-docker-ansible-deploy is really good, and it uses Docker and Traefik by default.
Correct. What you’d need in that case is a reverse proxy like ngrok, which is a bit more difficult to set up.
I have almost the same experience. I live in a small town in the Midwest, and the only ISP that goes to my house is Comcast/Xfinity. There’s a 1.2TB cap no matter what level you pay for, though they give you the option of paying an extra $30/month for unlimited. I’m really growing to appreciate our local ISP, which provides symmetrical FTTH, unlimited data, a static (or at least rarely changing) IP, and generally non-predatory business practices, all for a lower price than Xfinity. Unfortunately, my house is on the fringe of the town, so they don’t reach all the way here and I’m stuck with Xfinity.
.ovh domains are like $2/year, if that helps.