I’m not sure of the floor plan or roof type. But what I do is run a cable up the corner and drill a tiny hole right in the corner through the ceiling. Then I use a PoE powered access point and leave it in the ceiling space centrally located. One tiny hole you can patch with just about anything when you move house. If you have a rj45 crimper then the hole can be the diameter of the cable.

I’ve also done something similar where I run Ethernet under the floor. I lift up the carpet slightly right in the corner and drill a hole through the floor and run the Ethernet under the house. You also then take it up into a closet etc.

If you’re more adventurous and confident with electrical work you can also TURN OFF MAINS, then open up a wall power socket, disconnect the wires, tie a pull wire and your Ethernet cable very securely, and go into the roof and pull the two through into the roof space. You then tie the end of the elec cable to your pull wire and pull it back down to the socket. You can then get a wall plate that is a power socket and Ethernet female combo and voila….

I’ve used GlazeWM a bit before switching fully https://github.com/glazerdesktop/GlazeWM

That counts imho.

I’d still use LUKS. Even on USB keys.

I still wouldn’t use Veracrypt on a Linux disk. What about LUKS instead?

If you’re only using the external disk for days you could use ntfs with bitlocker and mount that in Linux. When your rest to fully migrate you could then do something Linux only if you wanted.

I had an issue where my docker networks started overlapping my network addresses and I had some issues to connect to the machine etc. so perhaps check to make sure your docker addresses don’t overlap your home network range somehow. Also keep the subnet mask in mind as the range might be bigger than what the first few numbers indicate.