Great list! If you already have the Raspberry Pi devices, great. If you were going to buy some, I would look at thin clients instead. Low-power, cheaper, more powerful, can use real hard drives instead of SD cards or adapters, and x86 instead of ARM. I have an HP T630 I like but I hear good things about the Dell Wyse 5070 too.

I really like Vikunja and use it individually both personally and professionally. It meets all of your criteria except tracking hours. They have a nice demo too: https://try.vikunja.io/.

I was going to say that Finamp doesn’t support offline filtering by artists, but when looking for the open issue I just found out the beta does support this! Awesome!

I host Caddy and Vaultwarden using Docker. The traffic into the reverse proxy, Caddy, works over port 443, not 1808 or 1443. Using the Caddyfile, you can tell Caddy which port to send the traffic over.

Caddy docker-compose.yml

services:
  caddy:
    ports:
      - "80:80"
      - "443:443"

Caddyfile, although there are other ways to do this

*.example.com {
        @vaultwarden host vaultwarden.example.com
        handle @vaultwarden {
                reverse_proxy :11808
        }

Vaultwarden docker-compose.yml

services:
  vaultwarden:
    ports:
      - 11808:80