@Revvers 
 

Here’s a very short version of your network VLAN breakdown:
VLAN 10: Private (internal devices, controlled internet access)
VLAN 20: Work (PCs, printers, NAS 2, controlled internet access)
VLAN 30: IoT/Smart Home (limited internet, communication with VLAN 10/20)
VLAN 40: Guest (internet access only)
VLAN 50: Management (EAP, OC200, ER605)
 

optical fiber
   └── AP Provider
       └── (cat 5e) TP-Link ER605
            └── (cat 5e) Switch TP-Link SG2008P
                ├── Port 1: IN from ER605
                ├── Port 2: switch SG108E (rack): vlan: 10,20
                    ├── IN
                    ├── OUT NVR
                    ├── OUT NAS 1 (private and backups)
                    └── OUT NAS 2 (multimedia and dockerization)
                ├── Port 3: switch SG105E (work) - vlan: 10,20
                    ├── IN
                    ├── OUT PC 1 (home)
                    ├── OUT PC 2 (work)
                    └── OUT PC 3 (work)
                ├── Port 4: switch SG105E (Smart Home) - vlan: 30
                    ├── IN
                    ├── OUT modul control monitoring
                    └── OUT modul control devices
                ├── Port 5 poe: controller OC200 - vlan: 50
                ├── Port 6 poe: EAP 615 wall - vlan: 10, 20, 30, 40
                    ├── WIFI printer (vlan private and work)
                    ├── WIFI control termostat from CH (vlan private and outside forward port)
                    ├── WIFI monitoring power consumption (vlan private and outside forward port)
                    └── WIFI mobile devices (phones, tablet ...): vlan 10
                └── Port 7 poe: EAP 615 wall - vlan: 10, 20, 30, 40
                
Will the SG105 and SG108 switches be sufficient or should I use something else?
Alternatively, I was thinking of something like this:
 

optical fiber
   └── AP Provider
       └── (cat 5e) TP-Link ER605
            └── (cat 5e) Switch SG2210P
                ├── Port SPF 1: to switch SG2008P in rack (transmiter to RJ45) <- stands 3m from the switch
                ├── Port SPF 2: empty
                |
                ├── Port 1: IN from ER605
                ├── Port 2: switch SG105E (work)
                ├── Port 3: switch SG105E (Smart Home)
                ├── Port 4 poe: controller OC200
                └── Port 5 poe: EAP 615 wall
                
The second solution seems unfeasible to me for the following reasons:
- I cannot get the SPF module from the AP provider (currently, this is complicated and difficult to achieve).
- I read that SPF is beneficial for long distances from the switch, but in my case, the distance is only 3 meters, so it probably won’t make a difference.
- To achieve higher internal transfer speeds, I would need to install a switch with SPF ports in the rack cabinet. Is this the only way?
- If I use the SG2008P switch in the rack cabinet, which lacks SPF ports, I would need to use an SPF-to-RJ45 converter. Does this even make sense in such a setup?
- The maximum internet speed offered by my provider is 0.7 Gbps. Currently, I use a 0.2 Gbps connection, which is completely sufficient for my needs.