Not updating OpenWRT for three years? Bad idea, apparently.

TLS ciphers seem to be a moving target on that timescale, and when I came to my countryhouse, the router couldn't negotiate ciphers with a modern hardened TLS setup.

Decided to build a new image with all the configs pre-baked in, flashed that, and it seems to work fine now…