I spent years running prod-like homelabs. Here's what I learned about securing