To reduce that, there are a few things you can do.

Option 1:

• Only open port 443 and run everything through a reverse proxy like traefik. You can open other ports ad you need them (game server for example)

• Run crowdsec to get rid of 95% of bad actors

• Whitelist IPs that you know traffic will be coming from and drop everything else

Option 2:

• wireguard VPN and just VPN into your home network to access your server

Option 3:

• Run tailscale

• run fail2ban