There is always risk with exposing something to the Internet or untrusted people. You need to take steps to mitigate the risk.

Make sure you patch

make sure you only expose as little as possible

use https/tls

have good, automated, tested backups to media that gets disconnected!

having access logs enabled

Isolate and separate from any private/internal stuff as much as possible.

    Separate hardware

    separate VLANs

    separate VMs

reddit.com/…/is_it_dangerous_to_open_http_ports_t…