I also have internal only traffic, but I still use let’s encrypt. I self signed for a couple of years, but switching to proper certificates made things much simpler and better. Especially on mobile.
I use a combination of my own domain and caddy. and duckdns, since my domain registrar does not have an api caddy can use, but I can point my domain to my duckdns domain and it works 👍
I use miniflux, and flux news app on android. It looks nice and works well (i posted about it some time ago https://lemmy.world/post/9574514 )
I am not missing any features, but I am not doing anything fancy. I have grouped the rss feeds, if that counts as filtering
I have used it for a long time now, and I don’t have an urge to try and find something better, like I do for some other self hosted stuff.