Concerning security: look into Traefik or Nginx Proxy Manager to proxy from your server to your domain. Then, attach a Cloudflare proxy to your domain so people

Concerning security: look into Traefik or Nginx Proxy Manager to proxy from your server to your domain. Then, attach a Cloudflare proxy to your domain so people won't ever know your home IP. Only expose port 443, and I think you're okay. Happy to hear otherwise.