Oha

Yea, I host a few (semi-)public services

Every Service is in its own VM and everything thats publicly accessible sits in its own network sepperated from everything else. I do daily backups in case anything goes wrong

Maybe its just me but I wouldnt want to rely on an OS that has been EOL since 2024

You can just… not put your TV on the internet?

ok

You dont need to map ip+port, most selfhosted services let you change their port to the default http port