I'm sure something like this has been asked many many times over the Internet. I'm asking again because I need situation-specific response. I've already set up a home web server. My setup is like this:
I have a Windows 10 machine in my home that is connected to a WiFi router. The machine is running web server at a specific port (not the default 80), using Microsoft IIS 10. I've setup port forwarding on the router to this port, and setup static IP on my Windows machine too so the internal network IP doesnt change. As for external IP, I'm using the DuckDNS.org service to provide a free dynamic DNS web address, and I've written my own software to keep my external IP up-to-date with DuckDNS website. The Windows machine is using the in-built firewall for preventing attacks on this IP from the Internet.
All this is working very nicely. I can access my home web server from around the world. It's all working great. At the moment only I'm using this web server. I plan on creating further websites for my colleagues and co-workers to collaborate.
EDIT: In addition to installing antivirus and IPS system, how do I go about tightening security on my home WiFi router from external intrusion? Links to guides would be appreciated.
Thanks in advance! Faraz