You can always do both and expose some services outside your network and keep the others local only while still being able to access them yourself with a vpn.