zlacker

>>jakels+(OP)
Never expose your server IP directly to the internet, vps or baremetal.

>>j45+z6
Any server? How do you run a public website? Even if you put it behind a load balancer, the load balancer is still a “server exposed to the internet”

>>cortes+Hl
Public facing services routed through a firewall or waf (cloudflare) always.

Backend access trivial with Tailscale, etc.

Public IP never needs to be used. You can just leave it an internal IP if you really want.

>>j45+QD
A firewall is a server, too, though.