The first real problem you hit when setting up a home server is access. Getting files off your server while you’re sitting at home is easy — everything is on the same network. But what about from work, or a hotel, or your phone on mobile data? Suddenly you need a way to reach into your home network from the outside, and that’s where things get interesting.
The instinct most people have is to open a port on their router. Point port 443 at your server, let traffic through, job done. It works, but it means your server is now reachable from the public internet. Anyone scanning IP addresses — and plenty of automated tools do exactly that — can find it and start probing. You’re relying entirely on your application’s login screen as your only line of defence.