Do you have these basics running in your homelab?
Is there something prebuilt out there to act as a web proxy for clients that are too underpowered or lack up to date certificates for modern SSL/TLS? This would just be for devices on my home network ...