I used to have my server publicly facing, but now I use Caddy with automatic DNS challenges.