First, try opnsense instead.
Second, buy a dedicated box.
For the box, if you don't need a bunch of ethernet ports, Beelink is pretty good. otherwise if you have the budget check out Protectli and the official OPNSense product line; which has rack mounted options.
