I suggest you check out pangolin. For me it’s worth about $12/year to not have a domain pointing directly at my home network, but instead have a layer of privacy and security. Running geofilter and crowdsec is really nice. Sometimes my logs show more than one blocked connection attempt per second. Another option if you want a free service is cloudflared tunneling.

I just switched from cloudflare to pangolin on a racknerd vps. I’m really liking it so far. Very easy to configure. I’ve got three different domains, and a ton of subdomains pointing to different services running on two servers on my lan. I’m loving the authentication, crowdsec, and geoblock features. The community guide for the metrics broke my system (and I didn’t backup any of the yaml files) but I was able to wipe everything and get it up again in about 30 minutes. I have my jellyfin bypassing the pangolin authentication for a few specific IPs so that my relatives can stream to their firesticks. I highly recommend it.