Don't make it public facing! Put it behind a VPN!!

Use a host that takes care of this for you.

My host has prebuilds for Vaultwarden.