pfSense running on an old laptop or other lightweight system, along with a VLAN-capable switch and a Ubiquiti or Cisco WAP371 wifi point. Bridge pfSense to your modem, and you have a full stack. You can run your pfSense box on a stick via VLAN-ing, so you only need one interface.