Some tools expose your ip when you host them. typically server platforms like start9, umbrel and MyNode dont let you install a VPN unless you do it in the Linux CLI which is not recommended and can cause the system to become unstable.

They also dont have any VPN options in the marketplace to install natively.

I will probably end up purchasing a managed switch to segregate part of my network and run nostrudel plus a free public relay on a separate machine behind it.

I would replace my router with pf sense but I have a 10GB router which i rely on for 8k video without the jitter that 1GB routers result with.