Free except from the drive to get there. But the drive is a lot cheaper than those racks would cost.

Vent fans at the top and the bottom. But it can be next to my work desk without the hardware getting annoying.

Not working on anything particular, but I’m going on a road trip on Tuesday to this regional airport that is giving away two racks perfect for my use case. Deep enough for my larger machines, sound proofed and 42U tall.

Finally my hardware can have a proper rack instead of being in a stack/pile in this harrypotteresque locker under my stairs.

Not much these days. While it used to be “everything”, now it’s:

• Http/https
• dns
• Wireguard
• Minecraft
• beegfs

My home servers have generally a lot smaller attack surface, as only a few ports are actually routed to them, so in theoey I could get away with a more relaxed approach. But I’m also a big believer in defense-in-depth, so I follow the same rules of thumb:

• iptables (or equivalent) that drops anything incoming that isn’t wanted. It also rejects anything going out that isn’t planned for.
• any public facing service (except ssh) gets its own user
• disable root login via ssh
• ssh login with key only on any user in sudoers

If I was on my laptop and not my phone I would post a screenshot with a P just for you