Random http traffic seems about as harmless as it ever was, if you just host static pages, or your own scripts/software and nothing generic. What's a bit iffy

Random http traffic seems about as harmless as it ever was, if you just host static pages, or your own scripts/software and nothing generic. What's a bit iffy is the privacy aspects. If you host anything that can identify you, your identity is just a HTTP request away for anyone who sees traffic from your IP address. But these concerns can be somewhat mitigated by making the server drop connections unless a known Host header or SNI is sent. Wholly recommended if you host stuff on your hope IP! Easily done with nginx by ensuring all server {} blocks have a proper server_name and a separate default server {} block just having return 444. So unless someone already knows the domain name of your home server, they'll not be able to access it with just an IP address. You'll stop many bots this way, too.