I’ve been using Neo Launcher for a while as a Nova replacement and it’s pretty good. Both of those features are included as well as things like shortcut actions when you double tap or swipe on the home screen.

That’s definitely its focus, but if you want a very simple store it does support payments: https://ghost.org/help/ecommerce/

If you’re willing to accept JavaScript I’d recommend a Ghost setup. Pretty good platform once it’s set up and easy to selfhost. Not sure you’ll find a platform without JS for your use case tbh.

I have two of the U6 lite APs and they cover my whole house perfectly. They’re POE but I just got a cheap POE unmanaged TP-Link switch for now.

I use yarr as well but forked it to use postgres as the database instead of sqlite: https://github.com/jgkawell/yarr

I’ll let folks with more security experience dive into your specific question, but another option is to host your website on something like Github pages (using a static website generator like Jekyll) and point Cloudflare at it. That way you don’t need anything pointed at your local network, get the uptime of Github, and still benefit from your own domain name.

That’s what I’m doing with my own blog and it’s been great. Github provides the service for free but if they ever charge for it I’ll just start hosting it locally.