You can mitigate a lot of security issues by not exposing your self-hosted stack to the Internet directly. Instead you can use a VPN to your home network.

An alternative is a front-end proxy on a box with a managed OS, like OpenWRT.