[ Removed by moderator ]

I’m trying to better secure my home network but not really sure what the “right” approach looks like in a self-hosted setup.

Right now its just a typical ISP modem → router → devices setup, but I’ve got a mix of things on the network now like laptops, phones, IoT, and a few services I want to expose safely. I’m not trying to go overkill, but I also don’t want to leave obvious gaps.

If you were starting from scratch what would you actually put in place? Segmentation, firewall rules, reverse proxy, VPN access, monitoring, etc. What’s considered the “baseline” for a reasonably secure home setup without turning it into an enterprise project?