[kornhole]

I have been running an SBC server at home for years with many publicly available services for friends and family. To keep everything secure and easy to maintain, I use Yunohost.org which is a distribution containing most of what you need to easily install, secure, update, backup, and manage the server. It includes fail2ban and other security measures. If you or your server would be target of a persistent attacker, using VLAN's or a VPS would be a good idea. I am sure somebody will comment on some tangents to go down a rabbit hole, but I am like probably 95% of self hosters whose servers contain nothing of any value for a hacker.