[carlosjobim]

Is this something that you can fix by putting the server behind Cloudflare? I assume most "home server" users would do that (or a similar service provided by Apple if they go down that route).

[toast0]

Well, Cloudflare is kind of spendy if you want them to proxy non-http traffic.

If you put a proxy in front, and you're careful to only allow inbound connections from the proxy, you should be ok though.