Once you're done setting up the snapshot schedule, I also recommend installing Tailscale (or better yet, Headscale, WireGuard ...
To keep things safe on my end, I had to juggle SSL certificates, firewalls, constant updates, and most importantly, VPNs. And ...