You are over complicating it. I suggest starting out with some sort of VPN. Wireguard is super simple to setup with a wg-easy container

I have read that page and this isnt really what i asked. this is about just snapper not how to setup btrfs to get it working as i explained above

Like I said in the post. To set it up just like Opensuse Tumbleweed. I find snapper quite easy to work with and use to rollback from those bootable snapshots. Also it making snapshots after updates is quite useful too

What do you mean with both?

I would also look in to I2P. Their are a few clients that support it like qbittorrent.

W3m

Traefik, it works very well on Kubernetes.