You can reduce some of those ports by using a reverse proxy. Do that you can access git home assistant etc from 443 with a subhuman.