I was a network engineer for many years and had a setup consisting of cast-off enterprise gear until I got tired of managing enterprise gear. Now my setup is:

I was a network engineer for many years and had a setup consisting of cast-off enterprise gear until I got tired of managing enterprise gear. Now my setup is: Gigabit Fiber ONT -> Dell Optiplex 980 running OPNsense -> cheap gigabit switch feeding patch panel to in-wall CAT6 -> 2x hardwired Eero Pro6e APs. A 10-gig switch sits in my office and all of my 10-gig devices are connected to it to access an all-SSD NAS over NFS and Samba. Every device that has an ethernet jack is hardwired. The 12 year old i5-540 in the Optiplex is capable of 300mbps wireguard VPN connections, which is more than enough for the hotel wifi I use to connect back to home. Optiplexes are so cheap that I have two, with a pre-configured spare sitting right next to the running system ready to go. I run a lot of services but am smart enough to know that I am too dumb to port-forward responsibly so while everything has an entry in my local DNS server if I need to access anything remotely, I do so via the VPN.