+1 to pfSense. I'm still learning, but it's a very strong commercial grade router. I bought a used 1U server off ebay that came driveless. Installed a small 120gb (overkill by far) SSD and I was off to the races. For $189, it beats the pants off those off-the-shelf routers. It has 6x10Gbe ports, great for future expansion should I get Fiber some time, and good for 10Gbe between network devices directly. Port forwarding has been a trip learning, but that's half the fun. I still have the old trusty standby if I screw something up. But pfSense lets you backup, experiment, restore if something craps out. And it has a ton of plugins and addons. They have OpenVPN, which I setup a server on, and now I can connect remotely to my home network super simple. They also do OpenVPN clients, so you can configure it with your VPN service (like the IPVanish service I have). Without even worrying, my router is always connected to the VPN, meaning all my devices are too! They have other addons too, like AdGuard, to do advanced DNS blocking like Pi-Hole. I'm really loving it. Here's a more recent listing for the hardware I'm using:
https://www.ebay.com/itm/133772637020