That is the perfect home solution: A spare raspberry pi running syslog-ng and stunnel connects securely to the central lggr server and all the local dumb clients like NAS, Firewall and Windows can log with their plain unencrypted UDP syslog streams to the local syslog proxy.
I just tried that one and it realy works very well.