Here’s a tip: it’s one less firewall to manage, if you make your server be the router, and have your Cudy do only WiFi in dumb AP mode. Or, if the server is in a good enough location, install ´haveged´ and have it serve WiFi too.