I virtualize all of the services that I “need” to to have running on one computer. Opnsense, pihole, cloudflare, vaultwarden, nginx, unifi, wire guard server and a lightweight Linux distro with Gui to remote into if needed.