Put your external facing services behind the VPN, or at least put them in a separate VLAN that’s firewalled in such a way that they can’t reach the rest of the network if they become compromised.

myaccounttag

Why did you add this part? And you’re supposed to add a @ before the channel name. Also, is your channel really called channel-1?

DuckDNS is great but their service went offline often enough for me to actually buy a domain.