Securing server on home network
 

Not sure if this belongs on the server or network area, but how can I secure a server on a home network so if someone compromises the server, they do not break into the whole network (e.g. the home network traffic)? Would a Vlan be used?

The first question would be, is this a server accessible from the outside? If this is a file/media server for use on the network, then your concerns security wise are relatively limited.

But if this is a server that offers services to the outside world, then what are they? What does this machine need to expose to the Internet?

The router has a public IP address, and that is how the server would be accessed: through port forwarding.

Set up a DMZ?