Mine is publicly exposed using the standard nextcloud:stable-apache docker container, with nginx (past) / traefik (present) handling TLS termination, but not otherwise adding additional security measures.

It’s been this way for several years and I’m yet to have issues, but it’s certainly not bulletproof since a critical vuln in Nextcloud could pwn it. That just hasn’t happened.

You know Google drive? You know how it doesn’t work when the internet is out? You know how we live in rural USA so the internet is out every other day?

Yeah that computer in the corner is my own Google drive that still works when the internet is out.

To add on this, my server is running a 4790k, and that’s plenty for all common tasks. While faster is always nicer, the threshold for good enough is very low for server tasks.