I’m running an OPNSense firewall.

I’m thinking a VLAN setup would work well and would be interested in what folks are using for firewall rules for their internet connect bitcoin devices.