I use Portainer.

I’ve got a P400 desktop and it handles everything it should. The matrix of another commenter is an important document to keep handy.

Containerized software. The main advantage of this is that every application, or stack of applications, runs in its own ecosystem. You can restart a container whenever without having to reboot your entire system. You can store all data off a container in a volume, so if you hit a snag, you can recreate the container without actually losing any of your configs.

You can also create networks so that apps run in different subnets than other apps.

Very simply put, a docker container is like a mini system that runs on your main system.

Something else I like about docker is docker compose. You can create a container or stack of containers with a single simple YAML file without actually having to install anything yourself. I manage my containers in Portainer.

You can run nginx in a docker container and define reverse proxies there. That will only require your to open up 443 in your router if you use SSL (which I highly recommend and is simple with Let’s Encrypt)

Then I’d recommend connecting to your arrs and torrent client in Nzb360 paid edition to manage everything in there.

As far as safety, well nothing is bulletproof. If they want to get in, they will. Best thing I can recommend is to run your arrs / indexers through a different IP address than your torrent client. But if they want to find you, they’ll find you. Thing is they probably won’t come after you if your ISP doesn’t report you uploading terabytes a day. SSL helps and keeping your arrs behind complex passwords (use a password manager) will keep the server itself relatively safe.

Unless of course, ISPs in your country suddenly start to crack down on illegal downloading hard.

Typo in your network_mode of the qbit container?

I have the T6 as my main but I cannot do per-room heating because my Sonoff TRV’s cannot talk to it in HA. I got the T6 before working with HA though. In my country the T6 is WiFi and you need the Resideo app.

Read up on Intel QSV. You essentially only need a recent cpu. i3 would do.

I hear good things about the Intel Arc A380. You basically only need it to convert video and the Intel is not too bad at that for not too steep a price