I did the same project about a year ago. I started with LibreElec, but there were a lot of weird bugs and quirks, and I was at the point where it was crashing 3 or 4 times a day. Whenever I went to get help on their forums it seemed like every thread of theirs was closed with no resolution due to piracy in the logs.
After that I installed PopOS and use Kodi that way and its been really solid.
Looks like I left Fire Sticks just in time. They say they are going to block apps that allow piracy. So are they going to block their own shitty web browser?
I did their plan to get out of debt, and it worked for us. This was many years ago before the “Ramsey personalities”.
I stopped listening after that. His advice for getting put of debt was practical, but beyond that the investing advice was useless and actually cost me in the long run.
The Ramsey personalities also made the whole show feel a lot more culty. Hearing them repeat his whole stick gave me kool aid drinker vibes.
I would listen to their advice of getting out of debt but thats it. It does work. Its not the only way to do it and mathematically their are better ways, but it does work.
I use the synapse container, I followed the docs on matrix.org.
As far as a revere proxy I use the SWAG container from linuxserver. My matrix instance isnt exposed to the internet or federated but it used to be. When it was exposed I was using fail2ban to ban exploit attempts but if I were to set it up again I’d probably use crowdsec instead. They are both built into SWAG.
I run it in docker and an update has never caused issues. Been about 3 years.
If you need a web browser you definitely do not want LibreElec