

You definitely do not want to expose Plex or Jellyfin to the internet.
That’s a great way to get PWD as Plex has had its fair share of vulnerabilities
Port forwarding is almost is to easy to do as people do it without understanding the risk. That’s one of the ways you end up with massive botnets.
I’m moving to Podman quadlets for self hosting infrastructure (Forgejo and Woodpecker CI) and Kubernetes for the actual services. I also still need to figure out were I’m going to do SSL terminations.
Nextcloud will be moved to Nextcloud AIO