Don’t expose things to the internet

That goes for corporate settings as well as personal stuff. You almost certainly do not need your self hosted services to be publicly accessible by bots. Anything on the internet gets pounded.