I self host.
I use nginx as a reverse proxy with crowdsec. The backends are nginx and mariadb. Everything is running on Debian VMs or LXCs with apparmor profiles and it's all isolated to an "untrusted" VLAN.
It's obviously still "safer" to have someone else host your stuff, like a VPS or Github Pages, etc, but I enjoy selfhosting and I feel like I've mitigated most of the risk.
I'd imagine that if your job is making YouTube videos, portainer and other graphical abstraction layers probably make more visually interesting videos than just watching someone type out a bunch of commands.
If you're going to be playing with custom locations and such, it might be worth using nginx directly instead of through the limitations of NPM.
I know I'm a bit late to the conversation, so I don't know if this is still helpful... But I have a camera with "AI Detection" built into it and it appears to send alerts via its ONVIF connection. I've disabled motion and other detectors on my NVR (AgentNVR) and instead configured it to just wait for an alert from the camera itself to start recording. It's been working quite well.
My initial plan was to use a coral TPU and frigate, but the Coral/Gasket drivers appear to be pretty old and I couldn't get them to work properly, myself.
I've also been running nginx in an unprivileged LXC container. I haven't used fail2ban, specifically, but crowdsec has been working without issue.
You can mostly just treat an LXC like a normal VM.
I'm using cloudflare as my nameserver and the free API seems to work just fine with ddclient.
I have a couple Libre Office files where I document the non-technical stuff for my own quick reference, like network layout in Draw, or IP and port assignments in Calc. I use a git repo to store and organize podman scripts, systemd unit files, configs, etc. Probably not the most elegant solution, but it's simple and FOSS.
Reverse proxy is Nginx Proxy Manager.
Libre Office "Base"
Another option would be to redirect logs to a ramdisk. That's what I'm doing on a RPI to try to minimize writes on the sd card. The biggest downside is that you lose your logs when you power off the device, but if the alternative is not having logs at all, I think it's still a better option.
Of course, installing a proper drive is still the best solution.
It never stopped working for me, besides the outage the other day. I'm guessing it's because I'm a mod for a sub. They said from the beginning that they wouldn't break things for mods, and surprisingly, it seems that they've kept their word on that.
For what it's worth, though, you can proxy other services, like Gemini or gopher, through the same proxy for simplicity's sake.