dihutenosa

• authoritative DNS for my domain
• email (Postfix, Dovecot, rspamd)
• Matrix chat and video conferencing (nginx, Synapse, MAS, Livekit, coturn, Postgres)
• Prosody elsewhere for failover if international links go down
• Nextcloud
• offsite backups for important data, not the whole OS (rsync)
• QR scanner on a webpage, for transferring complex passwords locally
• Syncthing
• Offsite monitoring (Prometheus, Grafana, AlertManager) - amusingly, on an old ex-Android phone running PostmarketOS (a variant of Alpine). Eats less than a watt of power.
• Wireguard to hook up the monitoring with minimum fuss

I’d use nginx and https://git-scm.com/docs/git-http-backend

Here’s a tip: it’s one less firewall to manage, if you make your server be the router, and have your Cudy do only WiFi in dumb AP mode. Or, if the server is in a good enough location, install ´haveged´ and have it serve WiFi too.

Is there a particular reason you’re not selfhosting Wireguard, instead relying on a commercial provider? I’m running this thing on my phone, via F-Droid: https://apt.izzysoft.de/fdroid/index/apk/com.zaneschepke.wireguardautotunnel (it eats battery if you enable keepalive, but you normally don’t need keepalive, so leave it unset).

Kiwix has the whole Gutenberg as a downloadable dataset. Search is basic, tho.

Get an old Android phone, possibly with a dead screen (bootloader must be unlocked). Flash PostmarketOS on it, or (if not supported) Termux. Its idle usage (with WiFi on, screen off) may be considerably less than 1w. It’ll have considerable amounts of CPU cores and RAM, more than a cheap VPS.