

Who is externally reaching these servers?
Joe public? Or just you and people you trust?
If it’s Joe public, I wouldn’t have the entry point on my home network (I might VPS tunnel, or just VPS host it).
If it’s just me and people I trust, I would use VPN for access, as opposed to exposing all these services publicly
Unless your home internet is CG-NAT, both have a publicly accessible IP address, so both will be scanned