Recommended MikroTik Courses:
MTCNA $10 https://www.udemy.com/course/mikrotik-network-associate-with-labs/
MTCSE $10 https://www.udemy.com/course/mikrotik-security-engineer-with-labs/
Recommended hardware:
hAP ac3 - has IPSec hardware support, cost: $100 (290-350 PLN)
Firewall hardening:
https://help.mikrotik.com/docs/display/ROS/Building+Advanced+Firewall