Home Server - Connect It To My Internet-Enabled Router Or A 2nd Router?

[hippovsmouse]

Hi Folks -
Well I have a small home file-server. What I have done since I built it is connect it to a 2nd router which has no internet, it's lan only. When I want to access the file-server, I change networks so I can access it. Then I change back to the router given to me by my isp to get back online.
This works fine but I find it slightly annoying that I have to switch back and forth between networks. At the same time, it somehow feels unwise to connect the server to the isp's router that has internet access (I know if I did this, there would be no more need to switch networks).
Still I would not really want to take a chance of a virus or worm or whatever spreading to the server.

Can I get some recommendations as to a good secure setup? I think I could connect that 2nd router to the isp's router, then connect the server to that 2nd router, and the machine would be secured well enough, the 2nd router would be on a different subnet. I am no ace with this stuff though, hence the request for advice 😵
thanks!

 

[ch33zw1z]

If you want it available on the LAN, but not the WAN, then set the server IP manually as static and simply don't give it a default gateway.

When you need to do updates, give it the gateway, run the updates, then remove the default gateway again.

edit: Without the Default Gateway, it can't leave your network.