i only use it for my family so like just me, my brother, and my parents so i just spun up a subdomain and configured apache to reverse proxy and use certbot for a lets encrypt certificate so i'm not exposing my port or ip. (the subdomain is just hosted on an ec2 server that i was using anyway)