I'm not seeing why it has to be connected to the internet. Make it a private, air-gapped intranet for all (or most) of the benefits of being "connected", but with no entry point for someone sitting on another continent to turn off the water.
mostly, because setting up a separate network is harder.
a virtual network built upon the regular internet is much easier.
And yes, mostly done wrong
mostly, because setting up a separate network is harder.
a virtual network built upon the regular internet is much easier.
And yes, mostly done wrong