I would not expose anything to the internet, except if you want to have it public.

I use wireguard as a private, self-hosted VPN. It’s easy to set up.