Cheap mini pc on an isolated vlan. Running a cloudflared tunnel or reverse proxy to a vpc on digitalocean, maybe moving to Hetzner soon, or in addition to for failover/ha.

All containers. Some just docker/podman, some one k8s cluster. Mainly it's just for fun. Except the cloud and local backups for our phones/Gcloud, which my wife will get really mad if it doesn't work.