It is worth but think about:

Must you open ports for the complete internet? Maybe one ip (your company) is enough? Also …

I use with Authelia a tls cert in caddy so only browser (mobiles also) with this cert can reach my site… and my services behind Authelia …