There's a wise man
Just in case anyone wonders, I activate a lot of stuff just to have it running to look for problems...This is my 'everday' setup.
IPv6 Native with a /60 prefix
DHCP Manual assignments
Port Trigger
Port Forward
UPnP
Network Services Filter
Traditional QoS
Media Server
SAMBA (router as Master Browser/WINS server)
NFS Server
NTPD time server serving all LAN clients
OpenVPN Server
OpenVPN Client w/policy routing (PIA)
DNSSEC (w/strict enforcement)
DNSCrypt
Guest Network (1 each 2.4/5GHz)
HTTP and HTTPS router access (both running on non-standard ports)
SSH access (w/key)
No router services exposed to WAN