I just restrict SSH to an internal VPN IP on all my servers (ZeroTier). 100% impossible to even try logging into them unless you’ve managed to crack into my network first.

I’m currently using one of the Rosewill rackmount chassis (https://www.rosewill.com/rosewill-rsv-l4412u-black/p/9SIA072GJ92847), fits well in my half rack along with my Unifi gear and HP ProLiant. I probably would’ve gone with something else if I had to buy it though- this was sorta a hand-me-down from a former roommate who didn’t want to take it with him when he left.

The domain is pretty important to Lemmy. If you lose control of it, your instance is effectively dead since the federation will not recognize your traffic until you get the domain back. There’s no way to change the domain of an instance so you’d have to start from scratch.