I've been a network engineer, security analyst, security engineer, and SOAR engineer over the course of the last 20 years; I don't want to think about any of that shit when I'm not being paid for it. I have backups of the things I can't replace, no port forwarding/ingress rules from WAN on the firewall, and the network is heavily segmented and uses least privilege. The random security stuff I leverage is set to drop/block and my family does a good job being vocal when something isn't working. If I needed to start over tomorrow, I'd just build a new server with Ansible playbooks on my GitHub.
I've been a network engineer, security analyst, security engineer, and SOAR engineer over the course of the last 20 years; I don't want to think about any of that shit when I'm not being paid for it. I have backups of the things I can't replace, no port forwarding/ingress rules from WAN on the firewall, and the network is heavily segmented and uses least privilege. The random security stuff I leverage is set to drop/block and my family does a good job being vocal when something isn't working. If I needed to start over tomorrow, I'd just build a new server with Ansible playbooks on my GitHub.