Budget (about 200 euro):

• Mikrotik hex s router
• TP-Link eap610 access point
• Unmanaged trendnet switch

Better(400-500 euro):

• Fanless minipc running pfsense - like this https://aliexpress.com/item/1005005515731536.html
• TP-Link eap653 access point
• mikrotik CRS310-8G+2S+IN switch

TP-Link omada line is basically a bunch of ubiquity clones at much lower price

I'd suggest looking into the Unifi product line. They have products that meet your needs and then some. I believe the company is based out of the EU so you are likely good in imports.

I would definitely go Opnsense for the router, it's much more flexible than other options. You can get various Intel mini-PCs with very low power usage that have 2.5GbE ports.

For the APs I'm pretty happy with my Unifi setup, but I've heard decent things about TP-Link Omada hardware too.

I thought about switching the router to a dedicated one without a wireless access point

Is there a reason for this? Unless it has specific issues you'd like to fix, I'd just keep using the current router and simply disable its WiFi.

• Raspberry Pi 4 + TP-Link UE300, w/ OpenWrt
• Netgear G308 switch, any GigE switch would do
• Ubiquiti AC access point, second hand from eBay

Supports gigabit speeds with SQM (QoS) over Ethernet and up to 400Mbps over WiFi in its current form.

Have a look at the Bananapi options, especially the R3. (Or the R2, it's a bit more mature)

It's a very capable single board computer with onboard managed switch, including SFP cages. If you want, you can buy antennas and utilise the wifi 6, or get a dedicated access point.

PFsense, openwrt, et al all have images. I think some people also run the mikrotik OS on it. It's powerful enough to run as a hypervisor so you can chop and change between all of these if you want.

It gets bonus points for accepting 5G modems for failover.

Hi!I see a lot of great suggestions here but I was just looking at your chart and I think just one fundamental change would benefit you.

Think of your switch as the "core" of your network. Everything should connect to that switch (computers, access points, firewall) for your best experience/performance.

If you go with unifi, you should know that their switches are managed but if you intend to self host anything, you're actually going to want the managed features!

Thanks and goodluck!

What is your bandwidth from your ISP?

I've heard good things about TP Link WAP as well. They have some that support 2.5G/Wifi6. I like pfsense if it is available in your country/budget for firewall. I use a virtual appliance but it's essentially the same thing software wise. It has a bit of a learning curve and but it's a very common enterprise level firewall so the skills you learn will be transferrable not just to work (if you work in IT) but also to other firewalls like fortinet, Palo Alto, etc. because the fundamental firewall principles are the same even if the GUI and specific features are not.

Why the unmanaged switch? Putting servers on a switch I like to know that the switch can handle VLAN and link aggregation.

I have similar to your current but my AP is able to be connected via cat 5 instead of mesh.