Congratulations!

Do I understand correctly that you log in to your router over Tailscale and then from their you SSH into your server to uncrypt? Or can you access your server directly?

I set up Dropbear also for my server, but can only access it over local SSH. So I set up a Raspberry Pi which allows me to remotely unlock the server.

If you plan to buy a new laptop I would give my money to a (somewhat) ethical company which fully supports Linux:

NovaCustom

Framework

Starlabs

Nitrokey

Tuxedo

system76

Some of those even have core boot built in.

Tailscale offers a paid Mullvad integration, where you can select most Mullvad servers as exit nodes. Works quite well.

Would you mind sharing the code?

Revolut works fine on CalyxOS.

They have core boot, which is a big plus, but the hardware itself is not open source.

You can also buy it second hand or get an older version for less money and upgrade later.

The upgradability and reparability is also a cost saving factor on the longer run. I broke the screen once and instead of buying a new laptop or have a costly repair, I just got a replacement for 200 bucks and fixed it easily myself.

Out of the box battery was not great for the 11th gen, but with the correct settings I get 0.4-0.5% drain/h in standby.