Very little is changing over time... I have a proliant salvage server running proxmox with some hosts and the router only port forwards to an NGINX proxy manager instance for the web interfaces on those hosts. I run a synology NAS separate from the proliant hardware that runs through the proxy.
I know I don't understand it all, and i'm open to suggestions.
Yes, I attribute security significant misconfigurations to a lag between new service deployments and a relevant review by network security (in a business environment. At home it's just me.)
So I'm running Milestone VMS, Synology NAS and maybe in a day a minecraft server for the kids, which should all be available outside my home. I'm using the mikrotik HexPOE which is my main router/firewall.