Pretty much any wireless AC AP from the last 10 years can hit those speeds with no headache, no keys, and no Windows.

An AP is just a WiFi point, you can use pretty much any AP with your pfsense router.

That’s what most of us do, using this windows VM just for WiFi is only going to cause you a headache in the future.

Maybe a stupid question, but isn’t it just easier to get a secondhand AP on eBay or something than deal with this windows WiFi BS?

You ask about future proofing but Windows 10 is EoL in 8 months.

There’s nothing bad per se, but obviously not sharing the inner workings of your internet facing server is just another step to protect yourself.

You mention in the OP this is for a business, my opinion you should be working on a professional resource/developer to manage this for you and not random Lemmy users.

On the use of Caddy, your configs here host a lot of sites with many specific configurations, I’m not sure caddy can support all of this. nginx is the tool of choice for a wide majority of the internet for a good reason.