I still remember getting 4 DELL OptiPlex 3010 including RAM-Modules, Harddisks etc. for under 100 € total.
Running on a 7020 for which I paid a bit more, particularly after disc upgraid plus extra USB, media slots to support preparing SD-Cards etc.
However, while there is a tendency to say "you only need an old machine for Linux" the reality, particularly if you're running a half-competent desktop environment, is much less forgiving. This machine has 32Gb RAM and is on the good side of adequate, it replaced a machine with 4Gb which- after having the latest Debian installed- was very much inadequate.
/But/ the old 4Gb machine is now driving a 3D printer and various other things quite happily: it has a desktop installed but almost everything can be done remotely (HTML-based remote control). In all probability a system with a web server and WebMin (or similar, i.e. again using HTML-based remote control) would again be adequate for a modest amount of traffic, and if it was adequate for WebMin it would be more than adequate for SSH in the hands of an experienced user.
And subject to space considerations plus the provisioning of screens etc., at this stage having a "real" machine is going to be far more use than a VM etc. because there would be far less risk of contention for "well known" network ports, strange routing configurations and so on.
Just my 2d-worth. But I've been doing this stuff for a long time.
MarkMLl