I used to self host externally but keeping up with all the security just became exhausting after awhile. I pulled it all back behind a VPN, been so much nicer after. my containers still patch nightly, which up until now hasn’t been an issue. Then i patch and reboot the actual servers quarterly. not so bad. So i would suggest if you are self hosting to not expose to the internet at all.