OpenWRT all the way. Skynet firewall PiHole Stable IP addresses and a private interface for family phones/laptops/pcs Guest network for nasty Roku TV/peleton EDIT: my favorite thing about Skynet is the new-ish ability to filter by country