Sorry I missed this one - my bad. I do a few things including A) keep it patched B) minimize the number of exposed services C) utilize pfsense to control [netw

Sorry I missed this one - my bad. I do a few things including A) keep it patched B) minimize the number of exposed services C) utilize pfsense to control [network-level] access above and beyond what freenas itself provides D) stream all host/service logs to an ELK stack to review for any funny business that may occur. Not bulletproof but I haven't had an incident yet. Hope this helps! P.S. All of this assumes proper backups. I can restore most of my stuff from backups, it just will take forever.