Look into Home Assistant — integrates with most devices, runs well in Docker.
Jellyfin (free/open source) or Plex. Jellyfin fits the self-hosted ethos better.
Bitcoin full node (bitcoind) or Lightning node (LND). Also look into Monero mining — CPU mineable, may be viable on home hardware.
CGNAT blocks port forwarding. Plan: Cloudflare Tunnel SSH (cloudflared ProxyCommand) for work laptop. Tailscale for phone if ever needed.
Add SPF (v=spf1 -all) and DMARC (v=DMARC1; p=reject; sp=reject;) TXT records in Cloudflare DNS for clemates.nz.