mztiq

Then use it through a VPN (e.g. WireGuard), that's how I do it. Only expose services to the internet if you really have to.