I have small home server that runs a qBittorrent in docker container, and I was wondering how bad/risky it is if I'd forward the port for the web UI so I can access it from outside my network.
I know that it's not wise to open ports mindlessly, but since the web UI needs an username and password to actually access the interface I thought it would make it harder for someone to wreak havoc on my machine/network. Or is it still easy to access other parts of my network even if the site behind the port needs authentication?
How else could I access my web UI safer from outside of my local network? I know that setting up a VPN is a fairly safe and easy solution, but is there some other option that would make it completely seamless (i.e. not even connecting to a VPN) for the user who wants to connect from the internet? For example would setting up a nginx reverse proxy with some IP/MAC filtering, or Cloudflare (or some other security measure) increase security for an open port in a significant way, so that it's worth the effort setting it up?
Just to be clear, I'm aware that there's no perfect solution and that a skilled/dedicated person probably could breach my network anyway, but my main goal is to prevent bots, common exploits, and leaving obvious vulnerabilities in my setup while keeping think relatively simple and easy to use.