Cool! Any interesting things in the tech stack, OP? I’ve been meaning to set something like this up for my family, local only.

If you’re into minimalism, I quite like mLauncher from f-droid.

I host my own feed aggregator/reader using Fresh RSS. Easy install with docker, pretty good feature set. I don’t like the mental overhead of going to an app to get things so I use my browser to view the feeds on mobile and desktop.

Scanning isn’t a problem, it’s when someone gets in and sets up a c&c client that you’ve got issues. If you have open ports and out of date software, or bad password practices, it’s only a matter of time before someone turns automated port knocking into embedding malware in your printers and IOT devices.

As others have suggested I would stick to internal only until you’re comfortable. Dealing with automated port scanning from all over the globe is a nightmare if you aren’t running a tight ship, and a collasal headache to deal with if they get in. I started with pihole, jellyfin, and some other simple docker services. Check out linuxserver.io if you go the docker route, they have good prebuilt compose files for you to use and the community has good info on their forums. You don’t need a domain but it’s preferred if you want to host something public-facing. Make sure you have fail2ban configured if you open stuff up to the web, it makes dealing with the automated attacks easier.

Advertisers/Ad Measurement Companies: We may share information collected from or about you with Advertisers and/or Ad Measurement Companies to select advertisements, and measure and improve advertising effectiveness. As a reminder, please see the Information from Other Sources section above if you have questions regarding the role of Advertisers or Ad Measurement Companies.

From https://help.netflix.com/en/legal/privacy

They’re definitely sharing the info externally.

This site says Netflix tracks 0% of your data. If that were true they’d have no clue who watches what. Something is fishy.