oha

Yea, I host a few (semi-)public services

Every Service is in its own VM and everything thats publicly accessible sits in its own network sepperated from everything else. I do daily backups in case anything goes wrong

You dont need to map ip+port, most selfhosted services let you change their port to the default http port