Public facing services should pantamime security best practices. I recognize its not realistic for most solo-home labs, but you can always improve with practice.