Hey, I've got an apu2c4 and was actually thinking about installing Ubuntu or Debian and try to run ansible on it, but your Nixos idea sounds good. Do you have any references for the setup? Have you found any downsides?
The reason I want to move away from pfsense is the lack of support for Wireguard.
The reason I want to move away from pfsense is the lack of support for Wireguard.