For servers there are passive cooled n100 variants on Aliexpress with multiple Intel i226 2.5GE network interfaces. We benchmarked them - they are able to serve line rate on all interfaces with a few routing/firewall routes. We bunkered a few of them in case we have a serve emergency situation - this allows us to setup infrastructure in zero time.

The next bigger variant (n305) is getting too hot - but at that point I'd start looking into variants which use an AMD notebook CPU.