Selfhosted

Well for one its not as automatic as it sounds. Basic protections will get you far. I have a minecraft server exposed but it only accepts connections from 3 specific places. Remember its the same as ever other real life deterrant, make yourself less of a target than the next guy. It also really helps not having juicy company data on your network. Home networks are way less of a target because you dont have any fine booty to loot.

Would something like Anubis or Iocaine prevent what you're worried about?

I haven't used either, but from what I understand they're both lightweight programs to prevent bot scraping. I think Anubis analyzes web traffic and blocks bots when detected, and Iocaine does something similar but also creates a maze of garbage data to redirect those bots into, in order to poison the AI itself and consume excessive resources on the end of the companies attempting to scrape the data.

Obviously what others have said about firewalls, VPNs, and antivirus still applies; maybe also a rootkit hunter and Linux Malware Detect? I'm still new to this though, so you probably know more about all that than I do. Sorry if I'm stating the obvious.

Not sure if this is overkill but maybe Network Security Toolkit might have some helpful tools as well?

Damn dawg, reading this made me not wanna self host my own instance. I was considering it.

Tailscale on everything

• routine patching
• siem log aggregation
• proper alerting metrics and notifications
• routine virus scanning
• proper network segregation between your NATd network and your personal network
• firewall firewall firewall
• expose your applications to the internet through a WAF, never directly

if you can do all these things properly, then there shouldn't be too much danger in selfhosting your apps publicly.

It's all about server hardening. See https://blog.melroy.org/2023/server-hardening/