@marvka a blocking dns server (think pihole but I'm running unbound) and wireguard. That way all my devices get filtered traffic, at home or mobile.
Also prosody for internal XMPP, postfix and dovecot for mail, and lighttpd for my bookmarks.
That's still only 526MB ram used out of 2GB.
@marvka XMPP!