Assume the following current state:
* 8GB RPi with proxmox
* a physical router is used to control network access (allowing access only to a whitelisted hosts, VPN killswitch, adblocking, DoT to upstream resolver, etc)
* RPi hosts lightweight LXCs from Community scripts (webdav-like for...