When the otherhalf plays games on her phone i watched the blocked % rise dramatically.

As a side note i had to portforward in my router to make this work.

I chose wireguard implemented by pivpn (i like pi’s)

Wireguard app on phone and a quick duckduck will find you a script or app for your laptop. Connected to your home in seconds.

Keepalived is the way. Gravity sync keeps everything in line. Works like a charm. I migrated yesterday from wifi to wired and cannot be happier. As a bonus did not need to reconfigure pivpn.

My use case is similar. So i use a Pi 5 running motioneye dev 64bit. 3 cams 2 usb webcams (uvc compliant) 1 esp32 cam wifi. Another Pi a 4 this time runs pihole and wireguard vpn. Static ip so all is good. Homarr is my dashboard and i can view from that or the motioneye interface directly.

Are you able yo host alongside freenas or on top of?