Do you mind me asking what model FritzBox you have? I have a 7350 AX. Does this more or less match how you did it?

Yeah I think my concerns regarding using a mini PC might be misplaced, but I was more thinking in terms of the bios and firmware of the mini PC, i.e. if it it’s an older model, will it continue to receive updates. But then again I guess that would take a security vulnerability somewhere higher up the stack to exploit in the first place. 🤔

OPNSense’s default security posture does seem pretty good and will likely be a significant uplift from my router’s basic firewall.

Didn’t actually know about the single config thing, very useful.

That switch looks like a serious bit of kit! I’ll be taking it easy first, space is also at a bit of a premium.

Do you have any recommendations for brands on Ali Express?

I am still considering the Lenovo route, will do some more digging, thanks.