zlacker

>>jakels+(OP)
Never expose your server IP directly to the internet, vps or baremetal.

>>j45+z6
Unless you need it to be reachable from the Internet, at which point it has to be... reachable from the Internet.

>>palata+fb
Public facing services routed through a firewall or waf (cloudflare) always.

Backend access trivial with Tailscale, etc.