It is worth but think about:

Must you open ports for the complete internet? Maybe one ip (your company) is enough? Also ..

I use with Authelia a tls cert in caddy so only browser (mobiles also) with this cert can reach my site.. and my services behind Authelia ..