I just didn’t want people to suggest to me to run a different server OS, as I can’t do that (I think).

Is it a run and just works docker compose file?

I think that it’s similar to the “Normal VPN without NAT”, but I want it to preserve the client IP all the way through to the server that the client wants to connect to (in other words, the website that the client wants to access will receive the IP of the client, not the VPN server).

I use Spotify for my podcasts, but I will never check out YouTube Music podcasts. Having 2 ads before the start of a podcast as if I’m watching a YouTube video is just unacceptable for me.

You can change the default browser, but it doesn’t matter since all of them are forced to use Apple’s WebKit.