>>106358457
>What are you hosting with open ports?
As in, open to the internet such that it can be accessed externally?
Nothing for the public, everything is blocked except for https://[PublicIp]/[Webpage] at which the user is redirected to https://[PublicIp]/login which is the login page of my home router, a Fortinet Fortigate 60f. Upon successful login they are then sent to https://[PublicIp]/[WebPage] and so long as the login session is active they also gain SSH, SMB and SAMBA access to the VIP destination of [WebPage]
Using this method I can have User-based access policy where depending on the user logging in, they are granted access to specific VIP mapped internal resources but for now I just have one VIP set up mapped to WAN