Over the top for security would be to setup a personal VPN and only watch it over the VPN. If you are enabling other users and you don’t want them on your network; using a proxy like nginx is the way.
Being new to this I would look into how to set these things up in docker using docker-compose.
I would not publicly expose ssh. Your home IP will get scanned all the time and external machines will try to connect to your ssh port.