Scanning isn’t a problem, it’s when someone gets in and sets up a c&c client that you’ve got issues. If you have open ports and out of date software, or bad password practices, it’s only a matter of time before someone turns automated port knocking into embedding malware in your printers and IOT devices.
As others have suggested I would stick to internal only until you’re comfortable. Dealing with automated port scanning from all over the globe is a nightmare if you aren’t running a tight ship, and a collasal headache to deal with if they get in. I started with pihole, jellyfin, and some other simple docker services. Check out linuxserver.io if you go the docker route, they have good prebuilt compose files for you to use and the community has good info on their forums. You don’t need a domain but it’s preferred if you want to host something public-facing. Make sure you have fail2ban configured if you open stuff up to the web, it makes dealing with the automated attacks easier.
I’ll do you one better, shoot a BFG to kill a docker container. https://github.com/gideonred/dockerdoomd
If you have more than one VPS to manage or multiple people that need access via SSH, you may want to look into using SSH certificates instead of keys. Keys get messy when you have to wrangle a lot of them and it’s a real pain in the but if you need to revoke multiple. It does require more than just generating a key pair and giving it to the server to trust though.
Advertisers/Ad Measurement Companies: We may share information collected from or about you with Advertisers and/or Ad Measurement Companies to select advertisements, and measure and improve advertising effectiveness. As a reminder, please see the Information from Other Sources section above if you have questions regarding the role of Advertisers or Ad Measurement Companies.
From https://help.netflix.com/en/legal/privacy
They’re definitely sharing the info externally.
This site says Netflix tracks 0% of your data. If that were true they’d have no clue who watches what. Something is fishy.
Raspberry pi/small NUC with a screen, in a digital kiosk mode. Just load a static html file with some js to update the clock. No keyboard, no touch input, no way to break it. Connect to it via ssh over tailscale or wireguard VPN to update the HTML with the notes you’d like to display. This way if internet goes down, the clock still works and whatever was displayed wrt messages stays displayed, and you don’t have to worry about the increased overhead of home assistant changes or updates breaking things. It will remain consistent since it’s just HTML and js. If you want less technical family members to be able to update the display…idk, seems like a headache.