How much of what you self-host do you keep LAN only over making accessible across the internet?

PII or anything that would demonstrate clear attribution is LAN, the rest of the "fun" stuff lives on a VPS. Wireguard between them.