Understand the concept
A public website can be hosted behind a reverse proxy or outbound tunnel, reducing the need for router port forwarding. That does not automatically make the application secure.
Publish only the intended web service. Keep management consoles private, use HTTPS, patch containers and host systems, and avoid leaking credentials, logs or private addresses in HTML.
TRY IT YOURSELF
Practice task
Check every public link and verify that no dashboard, NAS share, or SSH endpoint is reachable through a public hostname.
CHECK YOUR UNDERSTANDING