I really tried to use a “usb” install for a long time but could never get kernel upgrades (and some other packages) to work correctly.

These days I do a “sys” install but mount /var/log and some other directories to RAM.

I do this more or less, while the VPS itself doesn’t route over a VPN I have traffic forwarded between Tailscale and a commercial VPN.

It’s actually much more complicated and involved than that involving four double hop VPN tunnels, two that stay 100% in my country then two that bounce around other countries routed over the first two. This way my traffic exits the country without it appearing that way.

Bonus points if the 2.4 GHz and 5 GHz channels use the same SSID and security. I can’t stand when people separate them — who wants to sit there and switch networks all day trying to find the best one? Just let the clients do it on their own.