- good-looking domains instead of IPs
- tons of subdomains instead of ports
- universally recognized TLS certs via Let’s Encrypt. DNS challenges are the way to go - you don’t even have to expose your HTTP server
- dynamic DNS, again available via API
inbox@yourdomain.com
(better not to self-host, but to use an email provider)
Yes, there are risks:
Personally, I use DIUN. It just sends me notifications about available updates. I update things manually later. My system is pretty well isolated from outside world, so no need to hurry.
On a VPS, I would prefer a different approach though.