Move XNAT to dedicated VM
At the moment, XNAT and the torrent seed (transmission running in Docker container) share the same VM. This might harm the user experience on XNAT when the torrent seeds to peers.
It's surprisingly easier to move XNAT rather than transmission, since all the firewall configuration made by ICT rely on the current's machine IP. Once XNAT is redeployed to its own VM, only the nginx proxy will have to be updated to reflect the new VM's IP.
As for the other dHCP services, this might also be a good opportunity to transfer these VMs to a non-personal account.