How safe to exposure self-hosted services to internet?

Well, the title is self-explanatory. For example, paperless with the sensitive private scans or personal photo library via nextcloud? All of us use proxies with HTTPS and very strong passwords (I hope so lol), but...? What guys do you use if you need to work with your documents/photos/notes/whatever else in public areas?