What steps do you take to secure your server and your selfhosted services?
Inspired by this comment to try to learn what I'm missing.
Another concern I have is does it need to be on a separate machine on a vlan from the rest of the network or is that too much?
You're viewing a single thread.
Default block for incoming traffic is always a good starting point. I'm personally using crowdsec to good results, but still need to add some more to it as I keep seeing failed attacks that should be blocked much quicker.