Requirements / Recommendations

1. Hardware / Operating System

I would recommend buying a Raspberry PI 4 or 5 and running the PI as a 24/7 server in your home network. This will give you the most cost-effective, reliable hardware possible. Operation with LAN (I would not recommend WLAN!) and “ssh” is sufficient. Personally, I would not set up a Windows-based device for this purpose (nor do I describe it)!

2. Software

• currently the Raspberry OS is based on Debian 12 (Bookworm)
• I would recommend the OS Lite 64-bit
• You need "openssl", which is available in the standard PI OS

3. additional Software

Since the SSL implementation is so closely linked to DNS mechanisms, I would also recommend a DNS resolver. Recommendation: Technitium! If PI-Hole & AdGuard fans are now shaking their heads, please watch this video:

4. Decide on an internal domain name

Typically, if you operate an AVM Fritz Box, you can create a "fritz.box" domain. Then the names would be e.g. nas.fritz.box, router.fritz.box, repeater.fritz.box, etc. However, this does not necessarily reflect your home network.  It would therefore be better to use a name such as a unique, self-explanatory name, e.g. zuhause,lan or thomas.home.

Please do not use a .local domain, as .local is used by local mDNS services and can lead to "confusion", i.e. unreachability or strange behavior in the network on some devices!