I'm using StartOS with cloudflare zero trust tunnels. I can access all (http) services from a public domain, with SSL. Not exposing my home IP directly, and also avoid routing through TOR. Running BTCPayServer with Nostr plugin to receive zaps directly to my node. The free tiers of cloudflare also offer some basic ddos and bot protection. It has been working perfectly.