Thanks for the Parallel SSH link, never heard of that one before. And yeah seems like squid proxy is the way to go for this one.

Yeah I’ve only just started to dip my toes into Proxmox virtualization so I’m definitely playing around with LXC, Docker and VMs in my homelab. Thanks for your advice I will look into this!

Thanks for the link, definitely points me in the direction I want to go with this.

From what I’ve read on various Graphene posts, if the phone has just been rebooted and you haven’t unlocked it yet, it’s considered at an at rest state which means everything is fully encrypted until you unlock your phone. If you have the feature turned on where the phone auto restarts after a certain amount of time of idle use this would help somewhat mitigate the situation you’ve described.