I am using a
https://noctua.at/en/nh-l9i as the cooler for it and it keeps it in a sensible range. I don't really max out all of the cores frequently, and certainly not with the most power-hungry workloads - eg AVX2.
Noctua only recommend this with the following caveats:
Recommended with good case ventilation only.
If power limits are disabled in BIOS, CPU might not be able to keep maximum turbo clock under prolonged AVX loads, suggested maximum power limit: 140W
For case ventilation - the fan draws air straight from outside of the case onto the heatsink in the DeskMini chassis, so that's covered.
My workload is mostly VMs & containers - although it also runs a Gitlab CI build instance.
Practically, I've not had any issues. Typical CPU temps are in the 30s or 40s according to coretemp.
Obviously, YMMV!
edit: for me, this replaced a nuc8i5beh that was very loud under typical workloads. Changed from a laptop-style very whiny fan to the inaudible noise of the noctua, and I got a lot more performance out of it as well.