I think this would not be to hard. I guess would have to put a light sensor on the GPIO pins so could dim the display when it get dark in the room. The Squeezebox radio all ready does this.
Don’t get why need VPN. What you want to log in to it from out side your LAN? But it just play at your home. Or just want to get on it only get on Max2play with a password?