The amplifi line is the plug and play line closest to the google/eero/etc. experience. It is specifically the one I was referring to which has less than enthusiastic feedback.
I neglected to mention Mikrotik. They’re a Latvian company that is also in the space. I think they’d be farther to the professional/complex end of the spectrum. Omada is in the middle, and Ubiquiti leans toward the easier to use side. They’re all going to need more work than google wifi, unfortunately.
The “other” site has a wealth of information; evanmccann.net is a good source for demystifying their product line as well.
If you are establishing a TLS connection to a server, the server will need a certificate. It sounds like you’re trying to have two instances of a reverse proxy - one on the server, and one on the router. It may be my ignorance of the particulars, but my immediate thought is that you should select one point in the network to do reverse proxying.