Self hosting involves 3 steps in my life.

1) Find the docker compose file. 2) Change the expose line to make it specific 10.0.10.1:9000 instead of the default 0.0.0.0:9000 . 3) Connect via wireguard.

(Answers the "security" point a sister comment brought up too)