zerodawn
The arrs would be your best bet to reduce your input. If i’m not mistaken you can run them all through docker including a version of qbittorrentb that’s bound to a vpn and the only way it access the internet is through that vpn. Or you could split tunnel your vpn and bind your qbittorrent to it and bipass your jellyfin instance.
To play off what others are saying i think a mini pc and a stand alone nas may be the better route for you. It may seem counter intuitive to break it out into two devices but doing so will allow room for growth. If you buy a creeper bare bones mini pc and put more of your budget towards a nas and storage you could expand the mini pc without messing with your nas. You could keep the pi in the mix for a backup if your main pc is down or offload some services to it to balance performance.
As a self taught self-hosting enthusiast i wouldn’t recommend ansible to a beginner. I know that sounds backwards as absible makes everything easy and does all the work for you but that’s also part of the problem. It would be like jumping behind the wheel of a self driving car without knowing how to drive at all. When (not if) something goes wrong it could go wrong hard and you’d lose the whole instance.
It’s better to start with some other self hosted projects that interest you to get a feel for the process and software like docker then work your way up to bigger things like lemmy. I consider myself fairly versed in the process and lemmy still gave me some issues to set up and my pixelfed instance still won’t federate despite my best efforts. I’m pretty sure i know the issue, i just need to get around to fixing it.
Last thought, the raspberry pi is a pretty impressive little pc for it’s size and price point but you might find yourself quickly burning through resources depending on the number of active users you have and how heavily you use it.
As someone else said, selfhosting is the only real way to overcome this problem. When it’s all on your hardware it matters a lot less if the messaged at are decrypted server side or not. Everyone has a different threat level and at some point you have to put trust in some companies but if beeper makes you uncomfortable then buy a cheap second hand mini pc and learn to self host the service.
Not OP, i’ve heard nothing but good things about cloudflare tunnels but for me they have two major drawbacks. The first is you can’t use them for a self hosted media server such as jellyfin as it violates their terms of service. The second is you have to trust them with all your traffic. Now i have no reason to think they would do anything nefarious but i’m at the point in my threat model journey that the less i trust in any corporations hands the better. Just my two cents.
I’ll apologise now for the tiktok link, i know how much this place hates tiktok but here is a woman who did a deep dive and found evidence that the company actually changed their logo and tried to scrub the existence of the Cornucopia from the internet to distance themselves from Bad PR.
https://www.tiktok.com/@dimelifting/video/7311071477732838687