This is my main server, that hosts everything. It is the only one
connected to the Internet. ISP cable is not attached directly, but
through another 100Mbps switch, for electrical separation.

CPU  | Intel Xeon E-2356G 6-cores 3.2GHz (UHD Graphics P750, Rocket Lake)
RAM  | 128GB DDR4 ECC
HBA  | Avago SAS
HDD  | mirror of 2x 16 TB SATA
     | mirror of 2x 20 TB SATA
     | mirror of 2x 22 TB SATA
     | RAIDZ of 4x 15kRPM 450 GB SAS + 2x cold spare
Tape | external SAS LTO5
NIC  | 2x 1Gbps Ethernet
     | 1x SFP+ twinax DAC and 1x SFP+ twisted pair 10Gbps Ethernet
GNSS | u-blox-based USB GPS/GLONASS/Galileo/QZSS receiver
UPS  | APC 520W

=> FreeBSD 13.2 amd64 OS
=> ipfw: firewall/NAT
dummynet traffic scheduler
=> Jail virtualization
=> daemontools-encore: service manager
=> ucspi-tcp
=> OpenSSH: remote login server, built without OpenSSL
=> isc-dhcp44: DHCP server
=> dhcpcd: DHCP client
native rtadvd IPv6 RA daemon
=> chrony: NTP server
=> gpsd: for fetching time
DNS related:
    => NSD: DNS authoritative master server
    => CurveDNS: DNSCurve server
    => Unbound: recursive cache
    => dqcache: recursive cache with DNSCurve
    => zdns: zones generator
=> NNCP
=> Postfix: MTA
=> Postgrey: greylister
=> go-msgauth: DKIM-signer
=> mlmmj: maillist manager
=> public-inbox: maillist archives manager
=> godlighty: HTTP and CGI server
=> HAProxy: TCP proxy
=> Git
=> dht-bootstrap fork: BitTorrent DHT bootstrap server
=> github.com/gortc/stund: STUN server
=> rsync daemon
=> WireGuard: VPN server
=> Yggdrasil: overlay network
=> LFTP: FTP-mirroring tool
=> glocate: file indexing and searching tool
=> sgmon: monitoring
=> collected: system statistics collection daemon
=> dmon: network monitoring
=> SGBlog: blog/phlog/gemlog engine
=> zeasypki: X.509 TLS certificates management