As someone with a full homelab with all the fixins, I don't self-host external-facing services without a VPN (meaning, no ports open into my network and thus no

As someone with a full homelab with all the fixins, I don't self-host external-facing services without a VPN (meaning, no ports open into my network and thus no public web sites etc). This isn't because I don't know how, or that I'm too lazy, but rather an acknowledgement that it's a huge security risk and it isn't necessary. My public facing stuff lives on cheap cloud services and is kept well away from my home network.