A reverse proxy is the traditional safe route. Use a web server like Apache, nginx or caddy, and setup to reverse proxy all your services through port 443, and use let’s encrypt and certbot to generate and manage TLS certificates.
I host around 15 public facing web services this way using nginx.
Just be aware, this is very public facing so server security and hardening is important. Things like strong passwords, disabled root, use ssh keys instead of passwords, setup fail2ban, setup crowdsec etc.
The more modern safer way is not to truly expose to full public and use things like tailscale or cloudflare tunnels. But this relies on 3rd party servers and I’m not a fan of that, but it does bring benefits.
Baring post, my pc cold boots in 3 seconds. And does a full shutdown in 3 seconds as well.
Unfortunately my mobo’s slow to post so that takes around 5-6 seconds.
I moved from arch Linux to void and its init system called runit is amazing. Mega simple and fast.