zlacker

>>jakels+(OP)
Never expose your server IP directly to the internet, vps or baremetal.

>>j45+z6
As in "always run a network firewall" or "keep the IP secret"? Because I've had people suggest both and one is silly.

>>procar+97
A network firewall is mandatory.

Keeping the IP secret seems like a misnomer.

Its often possible to lock down the public IP entirely to not accept connections except what's initiated from the inside (like the cloudflare tunnel or otherwise reaching out).

Something like a Cloudflare+tunnel on one side, tailscale or something to get into it on the other.

Folks other than me have written decent tutorials that have been helpful.