@marvka a blocking dns server (think pihole but I'm running unbound) and wireguard. That way all my devices get filtered traffic, at home or mobile.
Also prosody for internal XMPP, postfix and dovecot for mail, and lighttpd for my bookmarks.
That's still only 526MB ram used out of 2GB.
Fosstodon is an English speaking Mastodon instance that is open to anyone who is interested in technology; particularly free & open source software.