Make sure to put any of your own personal web services behind some dumb authentication system to avoid most of these things biting you before you hear about the

Make sure to put any of your own personal web services behind some dumb authentication system to avoid most of these things biting you before you hear about them. I use nginx + basic http auth, since I'm using it for https anyway.