Separating a public mini PC server from the home network
Important data stays on a home NAS, and through already works well. Some services still need to be reachable from the public internet, either for friends or from work computers where cannot be installed. Some services currently run on OCI and Hetzner, but OCI is tightening its and Hetzner is raising prices.
A spare mini PC could host tool-style services such as and CyberChef, rather than store important data. The proposed layout is internet to Router A from the internet provider, then Router B connected through its WAN port, with only the mini PC behind Router B. The NAS and all other trusted devices stay behind Router A.
The main concern is whether the NAS and trusted home devices would remain protected if the public mini PC were breached.
Key points
- Important files remain on the NAS, while public tools would run on a separate mini PC.
- is needed for friends and for work computers where cannot be installed.
- OCI limits and Hetzner price increases are pushing the move back toward home hosting.
- The proposed network puts only the mini PC behind Router B, while trusted devices stay behind Router A.
- The main safety goal is limiting damage if the public mini PC is breached.