I stopped forwarding ports on my router, and a self-hosted mesh VPN made my home lab safer overnight

The safest port is the one that doesn't exist.