I would check out if Not Diamond (no personal affiliation) [0] fits your use case. They had a really interesting blog post recently where they open sourced their older model router [1].
Thanks for the constructive push back.You are definitely right. How important is self-hosting in your private VPC vs a managed solution with good tenant isolation? How sensitive are these documents you plan to upload.